Skip to content

CVE-2022-3656

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 14, 2026
Last Seen
September 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Telegram Desktop XSS Vulnerability Exposes Exported Chat Histories42.9

A stored cross-site scripting (XSS) vulnerability in Telegram Desktop allows malicious bots to embed hidden JavaScript in exported HTML chat files. This flaw enables the extraction of all messages and metadata from the exported file when opened in a browser. The issue arises from improper sanitizati...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

AWSCwe-79 - Cross-site Scripting (xss)FinancialT1041 - Exfiltration Over C2 ChannelT1059.007 - JavaScriptT1567 - Exfiltration Over Web ServiceTelegram DesktopBotFatherChromeOverlay.jsP.jsTelegram Bot API