CVE-2019-1306
No fix known EPSS 17%
A remote code execution vulnerability exists when Azure DevOps Server (ADO) and Team Foundation Server (TFS) fail to validate input properly, aka 'Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability'.
Products: Microsoft Team Foundation Server 2018, Microsoft Azure DevOps Server, Microsoft Azure DevOps Server 2019 Update 1