CVE-2019-0872 A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server....
MediumCVSS 5.4
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server and Team Foundation Server do not properly sanitize user provided input, aka 'Azure DevOps Server and Team Foundation Server Cross-site Scripting Vulnerability'. This CVE ID is unique from CVE-2019-0979.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft team foundation server | = 2015-4.2 | No fix listed |
| Microsoft team foundation server | = 2017-3.1 | No fix listed |
| Microsoft team foundation server | = 2018-1.2 | No fix listed |
| Microsoft team foundation server | = 2018-3.2 | No fix listed |
| Microsoft azure devops server | = 2019 | No fix listed |
| Microsoft team foundation server | = 2017 Update 3.1 | No fix listed |
| Microsoft Team Foundation Server 2018 | = Update 1.2 | No fix listed |
| Microsoft Team Foundation Server 2018 | = Update 3.2 | No fix listed |
| Microsoft Team Foundation Server 2015 | = Update 4.2 | No fix listed |
References
- portal.msrc.microsoft.com patch vendor-advisory