CVE-2023-36437

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Azure DevOps Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Nov 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-364387.5Windows TCP/IP Information Disclosure VulnerabilityCVE-2023-364398.0Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2023-36449.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been declared as critical. This vulnerability affCVE-2023-36454.8The Contact Form Builder by Bit Form WordPress plugin before 2.2.0 does not sanitise and escape some of its settings, which could allow highCVE-2023-364567.3authentik is an open-source Identity Provider. Prior to versions 2023.4.3 and 2023.5.5, authentik does not verify the source of the X-ForwarCVE-2023-364578.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can crafCVE-2023-364588.81Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.3.6, an authenticated attacker can crafCVE-2023-364596.1Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 1.3 and prior to versions 3.5.9, 4.0.5, and CVE-2023-36467.5On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error may trigger a kernel pCVE-2023-364609.9Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 3.5.0 and prior to versions 3.5.9, 4.0.5, anCVE-2023-364617.5Mastodon is a free, open-source social network server based on ActivityPub. When performing outgoing HTTP queries, Mastodon sets a timeout oCVE-2023-364625.4Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 2.6.0 and prior to versions 3.5.9, 4.0.5, an