Move App
Monthly
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.
Path traversal in AirAsia MOVE App for Android (versions up to 12.47.1) allows a locally present low-privileged attacker to escape intended directory boundaries via unsanitized handling of the `_display_name` argument inside `com.airasia.core.utils.RealPathUtil.getRealPath`. Exploitation yields limited integrity and availability impact constrained by Android's SELinux sandbox, with no confidentiality exposure. A public proof-of-concept document exists; the vendor did not respond to coordinated disclosure, and no patch has been released.