CVE-2020-17448
HIGHCVSS 7.8/10EPSS 2.28%
Last modified
CVE-2020-17448 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.. EPSS estimates a 2.28% chance of exploitation in the next 30 days.
Description
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Telegram | Telegram Desktop | <= 2.1.13 |
References
- https://github.com/telegramdesktop/tdesktop/releases/tag/v2.2.0Release Notes, Third Party Advisory
- https://security.gentoo.org/glsa/202101-34Third Party Advisory
- https://telegram.orgVendor Advisory
- https://github.com/telegramdesktop/tdesktop/releases/tag/v2.2.0Release Notes, Third Party Advisory
- https://security.gentoo.org/glsa/202101-34Third Party Advisory
- https://telegram.orgVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-17448?
Telegram Desktop through 2.1.13 allows a spoofed file type to bypass the Dangerous File Type Execution protection mechanism, as demonstrated by use of the chat window with a filename that lacks an extension.
How severe is CVE-2020-17448?
CVE-2020-17448 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 2.28% probability of exploitation in the next 30 days.
How do I fix CVE-2020-17448?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-17442An issue was discovered in picoTCP 1.7.0. The code for parsi…7.5
- CVE-2020-17443An issue was discovered in picoTCP 1.7.0. The code for creat…7.5
- CVE-2020-17444An issue was discovered in picoTCP 1.7.0. The routine for pr…7.5
- CVE-2020-17445An issue was discovered in picoTCP 1.7.0. The code for proce…7.5
- CVE-2020-17446asyncpg before 0.21.0 allows a malicious PostgreSQL server t…9.8
- CVE-2020-17447Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2020-17449PHP-Fusion 9.03 allows XSS via the error_log file.5.4
- CVE-2020-1745A file inclusion vulnerability was found in the AJP connecto…9.8
- CVE-2020-17450PHP-Fusion 9.03 allows XSS on the preview page.6.1
- CVE-2020-17451flatCore before 1.5.7 allows XSS by an admin via the acp/acp…4.8
- CVE-2020-17452flatCore before 1.5.7 allows upload and execution of a .php …7.2
- CVE-2020-17453WSO2 Management Console through 5.10 allows XSS via the carb…6.1
Are you affected by CVE-2020-17448?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST