March Security Release: Patches available for TFS 2018.3.2, TFS 2018.1.2, and TFS 2017.3.1
Mar 12, 2019Erin Dormier

Summary
This post announces the release of March 2019 security patches for TFS 2018.3.2, TFS 2018.1.2, and TFS 2017.3.1 to address a cross-site scripting (XSS) vulnerability in release management (CVE-2019-0777). It provides specific patch download links and detailed installation verification steps by checking the version of specific DLL files for each affected version. It also notes that this fix is already included in Azure DevOps Server 2019.