Security Updates for Azure Pipelines Agent (November 2023)

The Microsoft Azure Pipelines Agent running on the remote host is prior to 2.217.2. It is, therefore affected by a remote code execution vulnerability due to an integer overflow in the embedded mingit component. Note that Nessus has not tested for this issue but has instead relied only on the...

GitHub: CVE-2023-22490 mingit Information Disclosure Vulnerability

...

GitHub: CVE-2023-23946 mingit Remote Code Execution Vulnerability

...