writeups.xyz / Telegram (v4.9.155353) was rendering file:// links + opening them via NSWorkspace.open -> code execution.

Submitter : c2a

Date: 8 December 2019

Bounty : 500

Vulnerabilities :

• RCE

Programs :

• Telegram

Authors :

• Vladimir Metnew (@Vladimir_metnew)

Link :
https://github.com/Metnew/telegram-links-nsworkspace-open