Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-8602

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulne

Description

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Team

  • Foundation Server 2017 Update 3.1affected
  • Foundation Server 2018 Update 1.1affected
  • Foundation Server 2018 Update 3affected
  • Foundation Server 2018 Update 3.1affected

References