CVE-2023-21751

Summary

CVE-2023-21751 is a new spoofing vulnerability affecting Azure DevOps Servers. This issue enables an unauthenticated attacker to trick users into believing they are interacting with a legitimate Azure DevOps Server component. By manipulating the appearance of forms, the attacker can deceive users into entering sensitive information, such as credentials or access tokens, which can then be used for unauthorized access. The vulnerability arises due to insufficient input validation and lack of security context checks. This issue poses a significant risk to organizations using Azure DevOps Servers and highlights the importance of implementing proper security measures, including input validation and access control mechanisms.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.