The vulnerability CVE-2025-57921 in N-Media Frontend File Manager arises from missing authorization checks in the nmedia-user-file-uploader feature. This improper access control allows unauthorized users to perform actions that should be restricted, potentially leading to integrity impacts. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, no user interaction, and an impact limited to integrity without confidentiality or availability effects. The affected product versions include all versions up to 23.3.

The vulnerability allows unauthorized modification or manipulation of data due to missing authorization controls, impacting data integrity. There is no confidentiality or availability impact reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. Until a fix is available, restricting access to the affected component and reviewing access control configurations may help reduce risk.