Cross-site Scripting Vulnerability in Azure DevOps Server by Microsoft
CVE-2020-1326
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 14 July 2020
What is CVE-2020-1326?
A Cross-site Scripting (XSS) vulnerability exists in Azure DevOps Server, enabling attackers to inject malicious scripts through inadequately sanitized user inputs. This vulnerability could lead to unauthorized access to sensitive data, as attackers can execute arbitrary scripts within the context of the user's session. Proper input validation and sanitization are crucial for mitigating this risk to maintain the security integrity of applications utilizing Azure DevOps Server.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Azure DevOps Server 2019.0.1
Azure DevOps Server 2019 Update 1
Azure DevOps Server 2019 Update 1.1 = unspecified
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved