Vulnerability Description
MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supplying file paths to disclose arbitrary file contents on the affected device.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Minidvblinux | Minidvblinux | <= 5.4 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/51097ExploitThird Party AdvisoryVDB Entry
- https://www.minidvblinux.deProduct
- https://www.vulncheck.com/advisories/minidvblinux-arbitrary-file-read-vulnerabilThird Party Advisory
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5719.phpExploitThird Party Advisory
FAQ
What is CVE-2023-53772?
CVE-2023-53772 is a vulnerability with a CVSS score of 7.5 (HIGH). MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Attackers can exploit the about page by supp...
How severe is CVE-2023-53772?
CVE-2023-53772 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-53772?
Check the references section above for vendor advisories and patch information. Affected products include: Minidvblinux Minidvblinux.