CVE List

CVE-2019-1072

Critical 9.8

A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.

Published July 15, 2019.

Affected software

Microsoft Team Foundation Server

Microsoft Azure Devops Server

Reference links

Sign Up for Alerts