CVE-2019-16263

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must co...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The Twitter Kit framework through 3.4.2 for iOS does not properly validate the api.twitter.com SSL certificate. Although the certificate chain must contain one of a set of pinned certificates, there are certain implementation errors such as a lack of hostname verification. NOTE: this is an end-of-life product.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

参照URL

advisory blog.appicaptor.com
advisory github.com
report sit.fraunhofer.de