CVE:CVE-2020-12474
CNNVD:CNNVD-202005-008
Telegram是一款即时通信移动应用程序。Telegram Desktop是Telegram的桌面版。
Telegram Desktop 2.0.1及之前版本和Telegram（Android和IOS）6.0.1及之前版本中存在输入验证错误漏洞。远程攻击者可借助特制URL利用该漏洞实施欺骗攻击。
solution:Upgrade telegram telegram to a higher version than 6.0.1,and avoid the version (,6.0.1]; Upgrade telegram telegram_desktop to a higher version than 2.0.1,and avoid the version (,2.0.1]