fr Sign in

7.3 High

CVE-2023-36561 Azure DevOps Server Elevation of Privilege Vulnerability

Description

Azure DevOps Server Elevation of Privilege Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Azure DevOps Server 2022.0.1 2022.0	2022.0.0 → < 20230926.1	20230926.1
Azure DevOps Server 2020.0.2 2020.0	2020.0.0 → < 20230927.1	20230927.1
Azure DevOps Server 2020.1.2 2020.1	2020.1.0 → < 20230926.2	20230926.2

References

Azure DevOps Server Elevation of Privilege Vulnerability msrc.microsoft.com

Timeline

Published October 10, 2023
Last modified April 14, 2025

The 6 CVEs of Azure DevOps Server 2022.0.1 →

CVE-2023-38155 Azure DevOps Server Remote Code Execution Vulnerability 7.0 High CVE-2023-33136 Azure DevOps Server Remote Code Execution Vulnerability 8.8 High CVE-2023-36869 Azure DevOps Server Spoofing Vulnerability 6.3 Medium CVE-2023-21569 Azure DevOps Server Spoofing Vulnerability 5.5 Medium

Track this CVE