CVE-2020-17135 Azure DevOps Server Spoofing Vulnerability

Description

Azure DevOps Server Spoofing Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Azure DevOps Server 2019 Update 1.1 1.0	1.0 → latest	No fix stated
Azure DevOps Server 2019.0.1 2019.0	2019.0.0 → latest	No fix stated

Other CVEs of Azure DevOps Server 2019 Update 1.1

The 9 CVEs of Azure DevOps Server 2019 Update 1.1 →

CVE-2021-27067 Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability 6.5 Medium CVE-2020-17145 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability 5.4 Medium CVE-2020-1325 Azure DevOps Server and Team Foundation Services Spoofing Vulnerability 5.4 Medium CVE-2020-1326 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided… Not rated