CVE-2020-17448

Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat…

published August 11, 2020

CVSS
—
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02281 · 83.0th percentile
Published
2020-08-11T16:02Z
EPSS history
Timeline
  • 11 AUG 16:02Z
    Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat…
    cvelistv5