QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-0700

Back to search

CVE-2020-0700

Published: Mar 12, 2020

Modified: Aug 4, 2024

PUBLISHED

Description

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

VendorProductVersions

Microsoft

Azure DevOps Server

affected
2019.0.1

Microsoft

Team Foundation Server 2018

affected
Update 3.2
affected
Update 1.2

Microsoft

Team Foundation Server

affected
2017 Update 3.1

Microsoft

Azure DevOps Server 2019

affected
Update 1

Microsoft

Azure DevOps Server 2019 Update 1.1

affected
unspecified

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now