CVE-2018-17613

CRITICAL 9.8CVE-2018-17613 · Published 28/09/2018 · updated 17/06/2026

In short

CVE-2018-17613 is a CRITICAL (CVSS 9.8) vulnerability affecting telegram desktop (telegram).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
telegram desktop telegram	`= 1.3.16`	No fix yet

Description

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

References

seclists.org/oss-sec/2018/q3/280 · Mailing List
inputzero.io/2018/09/telegram-share-password-in-cleartext.html · Third Party Advisory

More vulnerabilities in telegram desktop

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

telegram desktop

= 1.3.16

No fix yet

More vulnerabilities in telegram desktop

See all →