CVE-2022-43363 - Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website

Back Back to CVE browser

MEDIUM

Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website

Published Dec 6, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

Telegram Web 15.3.1 allows XSS via a certain payload derived from a Target Corporation website. NOTE: some third parties have been unable to discern any relationship between the Pastebin information and a possible XSS finding.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://bugs.telegram.org/c/17831
Product
https://pastebin.com/72MRwNXW
ExploitThird Party Advisory

Link	Providers	Tags
https://bugs.telegram.org/c/17831		Product
https://pastebin.com/72MRwNXW		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 6, 2022

Updated Aug 3, 2024

Reserved Oct 17, 2022

Link CVE-2022-43363

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-43363

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-43363