← CVE Intelligence

CVE-2019-1305

Microsoft / Team Foundation Server PUBLISHED

Description (CNA)

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.

Affected (CNA)

Vendor / productVersions
Microsoft / Team Foundation Serveraffected 2017 Update 3.1
Microsoft / Team Foundation Server 2018affected Update 1.2; affected Update 3.2
Microsoft / Team Foundation Server 2015affected Update 4.2
Microsoft / Azure DevOps Serveraffected 2019.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.