CVE-2023-29218: High severity twitter recommendation algorithm vulnerability
DISPUTED The Twitter Recommendation Algorithm through ec83d01 allows attackers to cause a denial of service (reduction of reputation score) by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting, as exploited in the wild in March and April 2023. NOTE: Vendor states that allowing users to unfollow, mute, block, and report tweets and accounts and the impact of these negative engagements on Twitter’s ranking algorithm is a conscious design decision, rather than a security vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-29218?
CVE-2023-29218 is disputed and primarily concerns denial of service affecting reputation scores on Twitter.
How do I fix CVE-2023-29218?
There is currently no official fix for CVE-2023-29218, as it is a disputed vulnerability.
What types of attacks are associated with CVE-2023-29218?
CVE-2023-29218 allows attacks such as coordinated negative actions like unfollowing, muting, blocking, and reporting a target account.
Which software is affected by CVE-2023-29218?
CVE-2023-29218 affects the Twitter Recommendation Algorithm versions up to March 31, 2023.
Can CVE-2023-29218 impact individual users on Twitter?
Yes, CVE-2023-29218 can impact individual users by reducing their reputation scores through coordinated attacks.