CVE-2023-53772 HIGH

CVE-2023-53772: MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page

Vendor Minidvblinux
Product MiniDVBLinux
Weakness CWE-22 · Path traversal
Published December 9, 2025
Last update April 7, 2026

CVSS base score

8.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.

Key dates

02Disclosure timeline

December 9, 2025 CVE published
April 7, 2026 Record updated