CVE-2017-0911

Twitter Kit for iOS versions 3.0 to 3.2.1 is vulnerable to a callback verification flaw in the "Login with Twitter" component allowing an attacker to provide alternate credentials. In the final step of "Login with Twitter" authentication information is passed back to the application using the registered custom URL scheme (typically twitterkit-<consumer-key>) on iOS. Because the callback handler did not verify the authenticity of the response, this step is vulnerable to forgery, potentially allowing attacker to associate a Twitter account with a third-party service.

• CWE-360
• CWE-287

• https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.htmlThird Party Advisory
• https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71Patch, Third Party Advisory
• https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411Patch, Third Party Advisory
• https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017Release Notes, Third Party Advisory
• https://hackerone.com/reports/290229Permissions Required, Third Party Advisory
• https://blog.twitter.com/developer/en_us/topics/tips/2018/vulnerability-in-twitter-kit-for-ios.htmlThird Party Advisory
• https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/Social/Identity/TWTRMobileSSO.m#L71Patch, Third Party Advisory
• https://github.com/twitter/twitter-kit-ios/blob/b6eb49d149b056d826cbc4b53eaeb39a3ebd591e/TwitterKit/TwitterKit/TWTRTwitter.m#L411Patch, Third Party Advisory
• https://github.com/twitter/twitter-kit-ios/wiki/Changelog#322-november-28-2017Release Notes, Third Party Advisory
• https://hackerone.com/reports/290229Permissions Required, Third Party Advisory

Published

Feb 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0905The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5…
• CVE-2017-0906The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.…
• CVE-2017-0907The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8,…
• CVE-2017-0908Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-0909The private_address_check ruby gem before 0.4.1 is vulnerabl…
• CVE-2017-0910In Zulip Server before 1.7.1, on a server with multiple real…
• CVE-2017-0912Ubiquiti UCRM versions 2.5.0 to 2.7.7 are vulnerable to Stor…5.4
• CVE-2017-0913Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated…
• CVE-2017-0914Gitlab Community and Enterprise Editions version 10.1, 10.2,…
• CVE-2017-0915Gitlab Community Edition version 10.2.4 is vulnerable to a l…
• CVE-2017-0916Gitlab Community Edition version 10.3 is vulnerable to a lac…
• CVE-2017-0917Gitlab Community Edition version 10.2.4 is vulnerable to lac…