6.3
Medium
CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability
Description
Azure DevOps Server Spoofing Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure DevOps Server 1.0 | 1.0.0 → < 20230601.1 | 20230601.1 |
| Azure DevOps Server 2020.1.2 2020.1 | 2020.1.0 → < 20230601.3 | 20230601.3 |
| Azure DevOps Server 2022.0.1 2022.0 | 2022.0.0 → < 20230602.5 | 20230602.5 |
| Azure DevOps Server 2019.0.1 2019.0 | 2019.0.0 → < 20230721.6 | 20230721.6 |
Other CVEs of Azure DevOps Server
The 24 CVEs of Azure DevOps Server →
CVE-2024-20667
Azure DevOps Server Remote Code Execution Vulnerability
7.5
High
CVE-2023-38155
Azure DevOps Server Remote Code Execution Vulnerability
7.0
High
CVE-2023-33136
Azure DevOps Server Remote Code Execution Vulnerability
8.8
High
CVE-2020-1326
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided…
Not rated