The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session.
References
Link | Resource |
---|---|
https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html | Third Party Advisory |
https://security.gentoo.org/glsa/202105-07 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-02-19 11:15
Updated : 2022-05-23 15:18
NVD link : CVE-2021-27351
Mitre link : CVE-2021-27351
JSON object : View
CWE
CWE-613
Insufficient Session Expiration
Products Affected
telegram
- telegram