Code injection

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an...

PT-2019-14605

Name of the Vulnerable Software and Affected Versions Twitter Kit framework versions through 3.4.2 for iOS Description The issue concerns the Twitter Kit framework's failure to properly validate the SSL certificate for api.twitter.com, specifically due to a lack of hostname verification. This cou...