medium6.5
CVE-2018-17780
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsaf…
Impact
Telegram Desktop (aka tdesktop) 1.3.14, and Telegram 3.3.0.0 WP8.1 on Windows, leaks end-user public and private IP addresses during a call because of an unsafe default behavior in which P2P connections are accepted from clients outside of the My Contacts list.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Telegram | Telegram Desktop | Version 1.3.14 |
| Telegram | Telegram Messenger | Version 3.3.0.0 |