Government of the Republic of Trinidad and Tobago
gov.tt

Twitter Bug Allowed Publishing Tweets From Any Account

Twitter Bug Allowed Publishing Tweets From Any Account

A bug in the Twitter social network allowed an attacker to post tweets as a different user without having access to the victim’s account.

Discovered by a security researcher going by the name of kedrisec, the issue was reported to Twitter on February 26 and was resolved two days later. The vulnerability was assessed High severity and the reporter received a $7,560 bounty for it.

For more information on this vulnerability, visit Kedrisec Security Blog at

http://kedrisec.com/twitter-publish-by-any-user