Approved changes feed: RSS · Atom

cpe:2.3:a:twitter:twitter:6.62:*:*:*:*:iphone_os:*:*

part: a version: 6.62 update: *

VendorTwitter (98f97516-0d10-5b10-bf56-43d6aa195abe)
ProductTwitter (5aa17dd4-92f2-5cec-85f1-443c132da7e3)
Edition*
Language*
Software edition*
Target softwareiphone_os
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/twitter/twitter-server purl2cpe 2026-06-01 10:17:58.418975

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-10511 vulnerable 2026-06-08 05:07:25.229985 Details available
The Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates for the /1.1/help/settings.json configuration endpoint, permitting man-in-the-middle attackers the ability to view an application-only OAuth client token and potentially enable unreleased Twitter iOS app features.
Published: 2017-09-18T21:00:00.000Z
Updated: 2024-08-06T03:21:52.226Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.