CVE-2019-16263: High severity twitter vulnerability
The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-16263?
CVE-2019-16263 is a vulnerability in the Twitter Kit framework through 3.4.2 for iOS that does not properly validate the api.twitter.com SSL certificate.
How severe is CVE-2019-16263?
CVE-2019-16263 has a severity value of 7.4, which is considered high.
What software versions are affected by CVE-2019-16263?
Twitter Kit versions up to and including 3.4.2 for iOS are affected by CVE-2019-16263.
How can I fix CVE-2019-16263?
To fix CVE-2019-16263, users should apply the necessary patches or updates provided by the vendor.
Is there a reference for CVE-2019-16263?
Yes, there are references available for CVE-2019-16263 including blog posts and advisories.