CVE-2020-12474

MEDIUM 6.5CVE-2020-12474 · Published 01/05/2020 · updated 17/06/2026

In short

CVE-2020-12474 is a MEDIUM (CVSS 6.5) vulnerability affecting telegram (telegram), telegram desktop (telegram).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
telegram telegram	`≤ 6.0.1`	No fix yet
telegram desktop telegram	`≤ 2.0.1`	No fix yet

Description

Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.

References

VijayT007/Vulnerability-Database · Third Party Advisory

More vulnerabilities in telegram

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

≤ 6.0.1

No fix yet

telegram desktop

≤ 2.0.1

No fix yet

More vulnerabilities in telegram

See all →