An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cause unspecified consequences due to being able to decompile a local application and extract their API keys.
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Link | Tags |
---|---|
https://www.flightradar24.com | vendor advisory |
https://www.flightradar24.com.aa | broken link |
https://medium.com/%40janmejayaswainofficial/advisory-of-cve-2021-43512-5e54e6a93101 |