CVE-2018-8602
N/A
N/A
Summary
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Team | Foundation Server 2017 Update 3.1 | affected |
| Microsoft | Team | Foundation Server 2018 Update 1.1 | affected |
| Microsoft | Team | Foundation Server 2018 Update 3 | affected |
| Microsoft | Team | Foundation Server 2018 Update 3.1 | affected |
Weaknesses
- Spoofing
ADP Enrichment
CVE Program Container
Additional References
- http://www.securityfocus.com/bid/105895
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8602
References
- http://www.securityfocus.com/bid/105895
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8602
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.