description: A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
problem types: Spoofing
affected:
{
product: Team
vendor: Microsoft
versions:
status: affected, version: Foundation Server 2017 Update 3.1
status: affected, version: Foundation Server 2018 Update 1.1
status: affected, version: Foundation Server 2018 Update 3
status: affected, version: Foundation Server 2018 Update 3.1
}