CVE-2023-21553: Azure DevOps Server Remote Code Execution Vulnerability
First published: Tue Feb 14 2023(Updated: )
Azure DevOps Server Remote Code Execution Vulnerability
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Azure DevOps Server | =2020.1.2 | |
| Microsoft Azure DevOps Server | =2020.1.2-patch1 | |
| Microsoft Azure DevOps Server | =2020.1.2-patch2 | |
| Microsoft Azure DevOps Server | =2020.1.2-patch3 | |
| Microsoft Azure DevOps Server | =2020.1.2-patch4 | |
| Microsoft Azure DevOps Server 2020.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-21553?
CVE-2023-21553 is a remote code execution vulnerability in Azure DevOps Server.
How severe is CVE-2023-21553?
CVE-2023-21553 has a severity rating of 7.5 (high).
Which versions of Azure DevOps Server are affected by CVE-2023-21553?
Azure DevOps Server 2020.1.2, 2020.1.2-patch1, 2020.1.2-patch2, 2020.1.2-patch3, and 2020.1.2-patch4 are affected by CVE-2023-21553.
How can I fix CVE-2023-21553?
To fix CVE-2023-21553, you should update to Microsoft Azure DevOps Server 2020.1.2 or later versions.
Where can I find more information about CVE-2023-21553?
You can find more information about CVE-2023-21553 on the Microsoft Security Response Center website: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21553
- collector/msrc-cve
- collector/nvd-index
- collector/mitre-cve
- agent/title
- vendor/microsoft
- canonical/microsoft azure devops server
- version/microsoft azure devops server/2020.1.2
- version/microsoft azure devops server/2020.1.2-patch1
- version/microsoft azure devops server/2020.1.2-patch2
- version/microsoft azure devops server/2020.1.2-patch3
- version/microsoft azure devops server/2020.1.2-patch4
- canonical/microsoft azure devops server 2020.1.2