{"id":"CVE-2023-53772","aliases":["EUVD-2023-60180","GHSA-ppvc-j5f4-q5rv"],"status":"published","title":"MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page","description":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0096,"percentile":0.61739,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2025-12-09T20:55:15Z","modified":"2026-06-17T06:46:02Z","products":[{"vendor":"minidvblinux","product":"minidvblinux"}],"references":[{"url":"https://www.exploit-db.com/exploits/51097","tags":["exploit","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.minidvblinux.de","tags":["product","Product"]},{"url":"https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5719.php","tags":["third-party-advisory","Exploit","Third Party Advisory"]},{"url":"https://www.vulncheck.com/advisories/minidvblinux-arbitrary-file-read-vulnerability-via-about-page","tags":["third-party-advisory","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53772"},{"url":"https://github.com/advisories/GHSA-ppvc-j5f4-q5rv"}],"sources":{"cve":[{"id":"CVE-2023-53772","title":"MiniDVBLinux 5.4 Arbitrary File Read Vulnerability via About Page","description":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.","status":"published","published":"2025-12-09T20:55:15.808Z","modified":"2026-04-07T14:06:50.289Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:31.264455Z"}],"euvd":[{"id":"EUVD-2023-60180","description":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.","status":"published","published":"2025-12-09T20:55:15Z","modified":"2026-04-07T14:06:50Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:25:13.718727Z"}],"ghsa":[{"id":"GHSA-ppvc-j5f4-q5rv","title":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to...","description":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.","status":"published","published":"2025-12-09T21:31:49Z","modified":"2025-12-19T21:31:22Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:05:18.702066Z"}],"nvd":[{"id":"CVE-2023-53772","description":"MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.","status":"published","published":"2025-12-09T21:15:52.47Z","modified":"2026-06-17T06:46:02.657Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:09:26.50087Z"}]}}