CVE Intelligence

Vulnerabilidades de AirAsia

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de AirAsia: 1 registro(s), com severidade, exploração e correções.

MOVE App 1

Somente exploradas (KEV) →

CVE-2026-84431 Média · 4.4 CWE-22 01/09/2026
AirAsia MOVE App com.airasia.mobile com.airasia.core.utils.RealPathUtil.getRealPath path traversal
A vulnerability was detected in AirAsia MOVE App up to 12.47.1 on Android. This issue affects the function com.airasia.core.utils.RealPathUtil.getRealPath of the component com.airasia.mobile. Performing a manipulation of the argument _display_name results in path traversal. The attack requires a local approach. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.