CVE-2019-16263

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate

published October 7, 2019

CVSS
—
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01025 · 63.3th percentile
Published
2019-10-07T11:19Z
EPSS history
Timeline
  • 07 OCT 11:19Z
    The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate
    cvelistv5