Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Twitter Component: Twitter Kit Clear all filters
TI-2019-03840 CVE-2019-5431 · GHSA-4588-cpvg-rgr5

Cross-site request forgery in Twitter Kit for iOS

Priority LOW 25

This vulnerability was caused by an incomplete fix to CVE-2017-0911.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00382 Published 2019-05-06 No fix listed CWE-352
TI-2017-00858 CVE-2017-0911 · GHSA-rcwq-7c2v-mc74

Improper authentication in Twitter Kit for iOS

Priority LOW 25

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials.

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00501 Published 2018-02-09 No fix listed CWE-360