CVE-2020-12474

2020-05-0114:15:11

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.4%

JSON

Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.

CPENameOperatorVersion
tdesktopeq1.0.6
tdesktopeq0.10.21
tdesktopeq1.1.9
tdesktopeq1.0.33
tdesktopeq1.4.7
tdesktopeq0.7.12
tdesktopeq1.1.24
tdesktopeq1.0.2
tdesktopeq1.0.32
tdesktopeq0.6.4

Name	Operator	Version
tdesktop	eq	1.0.6
tdesktop	eq	0.10.21
tdesktop	eq	1.1.9
tdesktop	eq	1.0.33
tdesktop	eq	1.4.7
tdesktop	eq	0.7.12
tdesktop	eq	1.1.24
tdesktop	eq	1.0.2
tdesktop	eq	1.0.32
tdesktop	eq	0.6.4