CVE-2023-36869
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.
Risk Assessment
Organizations may be exposed to unauthorized actions, which could result in data loss or security breaches.
Recommendation
It is recommended to update to the latest version of Azure DevOps Server to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Azure DevOps Server
See all- CVE-2024-20667High
Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.
- CVE-2023-21553High
Remote Code Execution vulnerability in Azure DevOps Server. An attacker could exploit this vulnerability to run arbitrary code on the server.
- CVE-2023-21564High
Cross-site scripting vulnerability in Azure DevOps Server. Allows an attacker to inject malicious scripts.
Original NVD description (English source)
Azure DevOps Server Spoofing Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS