CVE PROGRAM SOURCE RECORD6.5 Medium
CVE-2026-112745
Azure DevOps Server Information Disclosure Vulnerability
- Status
- Published
- Published
- Updated
- Assigning organization
- microsoft
Description
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Microsoft Azure DevOps
1.0.0 to < Sprint 278affected
Microsoft Azure DevOps Server
1.0.0 to < Patch 8affected