PT-2025-50269 · Unknown · Minidvblinux

Published 2025-12-09 · Updated 2025-12-19 · CVE-2023-53772

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MiniDVBLinux version 5.4

Description MiniDVBLinux version 5.4 contains a flaw that allows attackers to read sensitive system files. This is possible through the 'file' GET parameter on the about page, enabling disclosure of arbitrary file contents on the affected device. The vulnerable parameter is file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-53772

Affected Products

Minidvblinux

References · 9

• 🔥 https://exploit-db.com/exploits/51097 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2022-5719.php · Exploit
• https://osv.dev/vulnerability/CVE-2023-53772 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53772 · Security Note
• https://vulncheck.com/advisories/minidvblinux-arbitrary-file-read-vulnerability-via-about-page · Note
• https://t.me/CVEtracker/39299 · Telegram Post
• https://t.me/cveNotify/146392 · Telegram Post
• https://twitter.com/CVEnew/status/1998732784698012016 · Twitter Post
• https://minidvblinux.de · Note