Vulnerabilities > Twitter > Twitter

DATE CVE VULNERABILITY TITLE RISK
2017-09-18 CVE-2016-10511 Improper Certificate Validation vulnerability in Twitter 6.62/6.62.1
The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.
network
twitter CWE-295
4.3