CyberRota Analysis
AI-GeneratedThe MapQuest Get Directions App version 10.16.1 on Android is vulnerable due to a path traversal issue in the getDataColumn function of the ExpoShareIntentModule.kt component. This vulnerability allows local attackers to manipulate file paths, potentially leading to unauthorized access to sensitive data. Organizations using this app should prioritize addressing this vulnerability, especially if they handle sensitive information on affected devices.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in MapQuest Get Directions App 10.16.1 on Android. This vulnerability affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component com.mapquest.android.ace. The manipulation leads to path traversal. An attack has to be approached locally. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.