Approved changes feed: RSS · Atom

cpe:2.3:a:moovit:bus_public_transit_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMoovit (8d49c673-a495-54b5-bbdb-5be085cab3bb)
ProductBus Public Transit App (16ad0788-eea2-51ab-9c35-067b786e961a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-12189 vulnerable 2026-07-29 00:23:32.125483 Moovit Bus & Public Transit App com.tranzmate improper authorization in handler for custom url scheme
MEDIUM (5.3)
A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-06-14T22:30:08.830Z
Updated: 2026-06-15T15:06:15.069Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.