First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-21751

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Azure DevOps Server Spoofing Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Azure DevOps Server 2022	>= 20231128.1, < 20231128.1
Microsoft	Azure DevOps Server 2020.1.2	>= 2020.1.0, < 20231127.4

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21751Patch, Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21751Patch, Vendor Advisory

Timeline

Published: Dec 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-217527.1Windows Backup Service Elevation of Privilege Vulnerability CVE-2023-217535.5Event Tracing for Windows Information Disclosure Vulnerability CVE-2023-217547.8Windows Kernel Elevation of Privilege Vulnerability CVE-2023-217557.8Windows Kernel Elevation of Privilege Vulnerability CVE-2023-217567.8Windows Win32k Elevation of Privilege Vulnerability CVE-2023-217577.5Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability CVE-2023-217587.5Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability CVE-2023-217593.3Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability CVE-2023-21767.8A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup result CVE-2023-217607.1Windows Print Spooler Elevation of Privilege Vulnerability CVE-2023-217617.5Microsoft Exchange Server Information Disclosure Vulnerability CVE-2023-217628.0Microsoft Exchange Server Spoofing Vulnerability