cve/2016/CVE-2016-10511.md
2024-06-09 00:33:16 +00:00

807 B

CVE-2016-10511

Description

The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.

POC

Reference

Github

No PoCs found on GitHub currently.