PatchTheCVEnifty vulnerabilities and fixes
Recent CVEs affecting nifty, with upgrade or downgrade steps. 1 tracked.
nifty has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-09-15. Highest priority: CVE-2020-25071 (score 32/100).
- CVE-2020-25071 MEDIUM 5.4 DOWNGRADE Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project
FAQ
How do I fix nifty vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nifty being exploited right now?
None of the tracked nifty CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nifty CVE should I patch first?
CVE-2020-25071 currently ranks highest (32/100): Nifty Project Management Web Application 2020-08-26 allows XSS, via Add Task, that is rendered upon a Project .