Security Advisory

CVE-2023-53770

7.5
HIGH

Vulnerability Description

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.
Published Date December 9, 2025
Official Source NIST NVD Advisory