An issue was discovered in FlightRadar24 v8.9.0, v8.10.0, v8.10.2, v8.10.3, v8.10.4 for Android, allows attackers to cause unspecified consequences due to being able to decompile a local application and extract their API keys.
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Flightradar24_flight_tracker | Flightradar24 | 8.9.0 (including) | 8.9.0 (including) |
| Flightradar24_flight_tracker | Flightradar24 | 8.10.0 (including) | 8.10.0 (including) |
| Flightradar24_flight_tracker | Flightradar24 | 8.10.2 (including) | 8.10.2 (including) |
| Flightradar24_flight_tracker | Flightradar24 | 8.10.3 (including) | 8.10.3 (including) |
| Flightradar24_flight_tracker | Flightradar24 | 8.10.4 (including) | 8.10.4 (including) |