CVE-2023-21553
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk70th percentile - higher than 70% of all known CVEs
Summary
Remote Code Execution vulnerability in Azure DevOps Server. An attacker could exploit this vulnerability to run arbitrary code on the server.
Risk Assessment
The risk is potential takeover of the Azure DevOps server, which could compromise data integrity and confidentiality.
Recommendation
Install the latest security updates provided by Microsoft for Azure DevOps Server.
Other vulnerabilities in Azure DevOps Server
See all- CVE-2024-20667High
Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.
- CVE-2023-36869Medium
A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.
- CVE-2023-21564High
Cross-site scripting vulnerability in Azure DevOps Server. Allows an attacker to inject malicious scripts.
Original NVD description (English source)
Azure DevOps Server Remote Code Execution Vulnerability