PT-2025-35309 · Unknown · De.Hafas.Android.Rejseplanen+1

Fxizenta · Published 2025-08-29 · Updated 2025-08-29 · CVE-2025-9672

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Rejseplanen App versions up to 8.2.2

Description A security issue has been identified in the Rejseplanen App related to improper export of android application components due to manipulation of an unknown function within the AndroidManifest.xml file of the de.hafas.android.rejseplanen component. The attack requires local access. The exploit has been publicly disclosed.

Recommendations Update to a version beyond 8.2.2.

Exploit

Fix

Weakness Enumeration

CWE-926

Related Identifiers

CVE-2025-9672

Affected Products

Rejseplanen App

De.Hafas.Android.Rejseplanen

References · 8

• 🔥 https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.rejseplanen.md#steps-to-reproduce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-9672 · Security Note
• https://github.com/KMov-g/androidapps/blob/main/de.hafas.android.rejseplanen.md · Note
• https://t.me/CVEtracker/31283 · Telegram Post
• https://vuldb.com/?id.321882 · Note
• https://vuldb.com/?ctiid.321882 · Note
• https://twitter.com/CVEnew/status/1961527530936058363 · Twitter Post
• https://vuldb.com/?submit.637924 · Note