CVE-2021-28459

Azure DevOps Server Spoofing Vulnerability

Score

CVSS 3.1 6.1 Medium

Status

Modified - secure@microsoft.com

Published

2021-04-13

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Azure Devops Server (Microsoft)

References

• http://packetstormsecurity.com/files/162190/Microsoft-Azure-DevOps-Server-2020.0.1-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2021/Apr/25
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28459