PT-2023-22211 · Twitter · Twitter

Redknightlois · Published 2023-04-03 · Updated 2026-02-15 · CVE-2023-29218

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Twitter Recommendation Algorithm through ec83d01

Description The issue allows attackers to cause a denial of service by arranging for multiple Twitter accounts to coordinate negative signals regarding a target account, such as unfollowing, muting, blocking, and reporting. This has been exploited in the wild in March and April 2023. The vendor states that allowing users to unfollow, mute, block, and report tweets and accounts and the impact of these negative engagements on Twitter’s ranking algorithm is a conscious design decision, rather than a security vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-29218

Affected Products

Twitter

References · 26

• https://osv.dev/vulnerability/CVE-2023-29218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29218 · Security Note
• https://github.com/twitter/the-algorithm/issues/1386 · Note
• https://github.com/twitter/the-algorithm/tree/ec83d01dcaebf369444d75ed04b3625a0a645eb9 · Note
• https://t.me/cvenotify/88557 · Telegram Post
• https://steventey.com/blog/twitter-algorithm · Note
• https://t.me/true_secator/4250 · Telegram Post
• https://twitter.com/grok/status/2010110890486427661 · Twitter Post
• https://twitter.com/jgmac1106/status/1809272129176891761 · Twitter Post
• https://twitter.com/jgmac1106/status/1703783043452878903 · Twitter Post
• https://t.me/cibsecurity/61360 · Telegram Post
• https://twitter.com/FaxanFM/status/1968878558878618076 · Twitter Post
• https://twitter.com/grok/status/1912803666593239333 · Twitter Post
• https://twitter.com/AlgorithmistAce/status/2023175632385908787 · Twitter Post
• https://twitter.com/jgmac1106/status/1780662491867156727 · Twitter Post