This vulnerability in N-Media Frontend File Manager (nmedia-user-file-uploader) arises from missing authorization checks, enabling attackers to bypass access control mechanisms. It affects all versions up to 23.3. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits are currently in the wild, and no official patch or remediation guidance has been provided yet.

An attacker can exploit the missing authorization to perform unauthorized actions that affect the integrity of the system or data managed by the Frontend File Manager. There is no impact on confidentiality or availability. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations for the Frontend File Manager to prevent unauthorized access. Monitor vendor channels for updates and apply patches promptly once released.