7.0
High
CVE-2023-38155 Azure DevOps Server Remote Code Execution Vulnerability
Description
Azure DevOps Server Remote Code Execution Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Azure DevOps Server 2019.0.1 2019.0 | 2019.0.0 → < 20230601.3 | 20230601.3 |
| Azure DevOps Server 2022.0.1 2022.0 | 2022.0.0 → < 20230825.4 | 20230825.4 |
| Azure DevOps Server 2020.1.2 2020.1 | 2020.1.0 → < 20230823.1 | 20230823.1 |
| Azure DevOps Server 1.0 | 1.0.0 → < 20230825.1 | 20230825.1 |
| Azure DevOps Server 2020.0.2 2020.0 | 2020.0.0 → < 20230820.2 | 20230820.2 |
References
- Azure DevOps Server Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Azure DevOps Server 2019.0.1
The 6 CVEs of Azure DevOps Server 2019.0.1 →
CVE-2023-33136
Azure DevOps Server Remote Code Execution Vulnerability
8.8
High
CVE-2023-36869
Azure DevOps Server Spoofing Vulnerability
6.3
Medium
CVE-2021-27067
Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability
6.5
Medium
CVE-2020-17145
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
5.4
Medium