CVE-2024-20667
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk69th percentile - higher than 69% of all known CVEs
Summary
Remote code execution vulnerability in Azure DevOps Server. An attacker could exploit this flaw to execute code remotely.
Risk Assessment
Potential for remote takeover of the DevOps server, potentially compromising development processes.
Recommendation
Apply security updates and restrict server access to trusted users only.
Other vulnerabilities in Azure DevOps Server
See all- CVE-2023-36869Medium
A vulnerability in Azure DevOps Server allows attackers to spoof users, potentially leading to unauthorized access to resources.
- CVE-2023-21553High
Remote Code Execution vulnerability in Azure DevOps Server. An attacker could exploit this vulnerability to run arbitrary code on the server.
- CVE-2023-21564High
Cross-site scripting vulnerability in Azure DevOps Server. Allows an attacker to inject malicious scripts.
Original NVD description (English source)
Azure DevOps Server Remote Code Execution Vulnerability