Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/06 12:00 a.m.•4 views

CVE-2019-5431: Cross-Site Request Forgery (CSRF)

This vulnerability was caused by an incomplete fix to CVE-2017-0911. Twitter Kit for iOS versions 3.0 to 3.4.0 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter"...

5.5CVSS5.9AI score0.00382EPSS
SaveExploits0References3
CNVD
CNVD
•added 2018/02/26 12:00 a.m.•9 views

Unspecified Vulnerability in Twitter Kit for iOS Login with Twitter Component

Twitter Kit for iOS is a set of open source native development kits for seamless interaction with Twitter on the iOS platform. login with Twitter component is one of the login components. A security vulnerability exists in the Login with Twitter component in Twitter Kit for iOS versions 3.0 throu...

5.5CVSS6.7AI score0.00501EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2018/02/09 10:00 p.m.•34 views

CVE-2017-0911

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication information is passed back to the application using the...

5.1AI score0.00501EPSS
SaveExploits0References5
Rows per page
Query Builder