| Package | Affected versions | Patched versions |
|---|---|---|
| tweetbot | = 1.3.3= 2.8.5 |
Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform undesired actions, as demonstrated via the tweetbot:///follow/ URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free