February Security Release: Team Foundation Server 2018 Update 3.2 Patch 1 is available

This post announces the release of Team Foundation Server 2018 Update 3.2 Patch 1, which addresses two cross-site scripting (XSS) vulnerabilities (CVE-2019-0742 and CVE-2019-0743) found through the Azure DevOps Bounty Program. It recommends upgrading from TFS 2018 Update 2 or Update 3 to TFS 2018 Update 3.2 and applying the patch. It also provides instructions for verifying the installation by checking the version of the Microsoft.TeamFoundation.WorkItemTracking.Web.dll file.