Description
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server HTML Injection Vulnerability'.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Azure DevOps Server | 2019.0.1 | — |
| Microsoft | Azure DevOps Server 2019 | Update 1 | — |
| Microsoft | Azure DevOps Server 2019 Update 1.1 | unspecified | — |