description: A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.
problem types: Spoofing
affected:
{
product: Azure DevOps Server
vendor: Microsoft
versions:
status: affected, version: 2019
}