IDN Homograph Vulnerability in Telegram Desktop and Mobile Apps
CVE-2020-12474

6.5MEDIUM

Key Information:

Vendor

Telegram

Status
Telegram
Telegram Desktop
Vendor
CVE Published:
1 May 2020

What is CVE-2020-12474?

The vulnerability allows for IDN Homograph attacks through the use of Punycode, which can manipulate public URLs or group chat invitation links in Telegram Desktop and mobile applications. This could enable an attacker to deceive users into visiting malicious websites disguised as legitimate ones, potentially compromising sensitive information.

References

https://github.com/VijayT007/Vulnerability-Database/blob/...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.