CVE-2018-17613

—

CVSS 3.0

9.8 critical

EPSS

2%p75

Published

Sep 28, 2018 (Sep 28, 2018)

Modified

Jun 17, 2026

Description

Telegram Desktop (aka tdesktop) 1.3.16 alpha, when "Use proxy" is enabled, sends credentials and application data in cleartext over the SOCKS5 protocol.

Vendors: telegram
Products: telegram desktop
Weakness: CWE-522
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news1 stories

Telegram Calling Feature Leaks Your IP Addresses—Patch Released

The Hacker NewsOct 1, 12:06 UTC · Oct 1, 2018Vulnerability in the wildCVE-2018-17780 CVE-2018-17613