CVE-2023-21565

Azure DevOps Server Spoofing Vulnerability

State: Published
Severity: 7.1 High
Published: Jun 13, 2023
Updated: Jan 1, 2025
Reserved: Dec 1, 2022

Description

Azure DevOps Server Spoofing Vulnerability

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
Azure DevOps Server 2022Microsoft	20230131.0 to before 20230602.4Affected
Azure DevOps Server 2020.1.2Microsoft	2020.1.0 to before 20230601.3Affected
Azure DevOps Server 2022.0.1Microsoft	2022.0.0 to before 20230602.5Affected

References

Azure DevOps Server Spoofing Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.