This vulnerability in N-Media Frontend File Manager arises from improper access control configuration, allowing an attacker to bypass authorization by manipulating a user-controlled key. The flaw affects all versions up to 23.5. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, and no user interaction, resulting in limited confidentiality impact without affecting integrity or availability. No vendor patch or advisory is provided, and the product is not a cloud service.

The vulnerability allows unauthorized users to bypass access controls and gain limited read access to data managed by the Frontend File Manager. There is no evidence of impact on data integrity or system availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, review and tighten access control configurations to prevent unauthorized access via user-controlled keys. Monitor for vendor updates regarding patches or official mitigations.