CVE Catalog
CVE-2023-21564
HighCVSS 7.1Exploitation Probability (EPSS)
Elevated risk0.89%
56th percentile - higher than 56% of all known CVEs
Summary
Cross-site scripting vulnerability in Azure DevOps Server. Allows an attacker to inject malicious scripts.
Risk Assessment
An attacker could steal user data or hijack their sessions.
Recommendation
Apply security updates provided by Microsoft.
Other vulnerabilities in Azure DevOps Server
See all- CVE-2024-20667High
Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.
- CVE-2023-36869Medium
A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.
- CVE-2023-21553High
Remote Code Execution vulnerability in Azure DevOps Server. An attacker could exploit this vulnerability to run arbitrary code on the server.
Original NVD description (English source)
Azure DevOps Server Cross-Site Scripting Vulnerability