Telegram Web App Vulnerability Let Attackers Hijack Sessions

A new vulnerability has been discovered in Telegram, allowing a threat actor to hijack a Telegram user session via XSS (Cross-Site Scripting). This vulnerability exists in Telegram WebK versions below 2.0.0. A CVE for this vulnerability is yet to be assigned. However, Telegram has acted swiftly upon this vulnerability and has patched it accordingly. This […]

The post Telegram Web App Vulnerability Let Attackers Hijack Sessions appeared first on Cyber Security News.

actor app app vulnerability attackers cross-site cve cyber security hijack new vulnerability scripting session session hijacking sessions telegram threat threat actor vulnerability web web app web security xss xss-vulnerability