Telegram API suffers from a Cross Site Request Forgery vulnerability. Note that this advisory has site-specific information.