X / xAI · Report #446271
CRLF injection
Validstatus
mediumseverity
439upvotes
25 Dec 2019disclosed
Summary
https://ads.twitter.com was vulnerability to HTTP response splitting in the endpoint https://ads.twitter.com/subscriptions/mobile/landing that allows to an attacker add a malicious header in the response headers.
PoC: https://ads.twitter.com/subscriptions/mobile/landing?t=%0d%0aSet-Cookie:%20csrf_id=injection%3b
How it was found
Hello twiiter security team,
on the domain ads.twitter.com http response splitting is vulnerability.
PoC: https://ads.twitter.com/subscriptions/mobile/landing?ref=gl-tw-tw-promote-mode?t=%0d%0atest:tested
Impact
an attacker can set new header