← All advisories

High severity8.8NVD Advisory· Published Jan 17, 2019· Updated Jun 17, 2026

CVE-2018-20728

CVE-2018-20728

Description

A cross site request forgery (CSRF) vulnerability in NeDi before 1.7Cp3 allows remote attackers to escalate privileges via User-Management.php.

Affected products

3

Linux Foundation/Nediinferred
Range: <1.7Cp3
Nedi/Nedi
cpe:2.3:a:nedi:nedi:*:*:*:*:*:*:*:*
Range: <=1.7c
Nedit/Neditllm-fuzzy
Range: <1.7Cp3

Patches

Vulnerability mechanics

References

2

www.sakerhetskontoret.com/disclosures/nedi/report.htmlnvdExploitThird Party Advisory
www.nedi.ch/end-of-year-update/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.