CVE-2019-0996

A spoofing vulnerability exists in Azure DevOps Server when it improperly handles requests to authorize applications, resulting in a cross-site request forgery. An attacker who successfully exploited this vulnerability could bypass OAuth protections and register an application on behalf of the...

CVE-2019-0996

CVE-2019-0996 affects Microsoft Azure DevOps Server and describes a cross-site request forgery (CSRF/XSRF) flaw in how application registration requests are handled. The underlying issue could allow an attacker to bypass OAuth protections and register an application on behalf of a targeted user i...