High · 7.1 CVE-2023-21564 EUVD-2023-25731GHSA-fvm6-3mw8-9cq2

Azure DevOps Server Cross-Site Scripting Vulnerability

Published Feb 14, 2023 · Updated Aug 19, 2026 · Assigned by microsoft

Vendor: Microsoft Product: Azure DevOps Server 2022

Description

Azure DevOps Server Cross-Site Scripting Vulnerability

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Azure DevOps Server 2022	20230131.0 – < 20230131.1	20230131.1

Advisories 1

MSRC-CVE-2023-21564 Azure DevOps Server Cross-Site Scripting Vulnerability Microsoft Security Response Center · Feb 14, 2023

References

Azure DevOps Server Cross-Site Scripting Vulnerability vendor-advisory patch