Twitter acted fast a few days ago when it was notified of the existence of a Cross-Site Request Forgery (CSRF) vulnerability that plagued the social networks add mobile device feature.
This feature allows users to control their accounts via SMS.The security hole could have been leveraged to gain access to any users direct messages and post tweets from any account.
The issue was discovered by security researcher Henry Hoggard on Novem…
Comments are closed.
