This month, we are releasing fixes for security vulnerabilities that impact our self-hosted product, Azure DevOps Server, as well as the following older Team Foundation Server releases: TFS 2017 and TFS 2018.

The following vulnerability and bug will be fixed with this patch:

  • CVE-2021-27067: Information disclosure

  • CVE-2021-28459: Spoofing vulnerability

  • Resolve the issue reported in this Developer Community feedback ticket | New Test Case button not working. The fix for this issue was applied to Azure DevOps Server 2020 and 2020.0.1 with the February patch. With this patch we are fixing this issue for Azure DevOps Server 2019.1.1.

#azure devops server #devops #azure devops

April patches for Azure DevOps Server and Team Foundation Server
1.30 GEEK