This vulnerability in N-Media Frontend File Manager allows an attacker to bypass authorization controls by manipulating a user-controlled key due to misconfigured access control security levels. It affects versions up to and including 23.5. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, resulting in limited confidentiality impact but no integrity or availability impact. No patch or official remediation information is currently available.

An attacker can bypass authorization mechanisms, potentially gaining unauthorized read access to files managed by the Frontend File Manager. The impact is limited to confidentiality loss without affecting integrity or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations to prevent unauthorized access via user-controlled keys. Monitor vendor channels for updates and apply patches promptly once released.