Security Updates for Azure Pipelines Agent (November 2023)

The Microsoft Azure Pipelines Agent running on the remote host is prior to 2.217.2. It is, therefore affected by a remote code execution vulnerability due to an integer overflow in the embedded mingit component. Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-36437

Azure DevOps Server Remote Code Execution Vulnerability...

CVE-2023-36437 Azure DevOps Server Remote Code Execution Vulnerability

...

CVE-2023-36437

CVE-2023-36437 is a remote code execution vulnerability associated with Microsoft Azure DevOps components. A connected Nessus plugin notes that the Azure Pipelines Agent, when running on a remote host with versions prior to 2.217.2, is affected by a remote code execution vulnerability caused by a...