Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka "Team Foundation Server Cross-site Scripting Vulnerability." This affects Team.

Product Status

Learn more

Versions 4 Total

Default Status: unknown

affected

  • affected at Foundation Server 2017 Update 3.1 
  • affected at Foundation Server 2018 Update 1.1 
  • affected at Foundation Server 2018 Update 3 
  • affected at Foundation Server 2018 Update 3.1 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.