Team Foundation Server Security Updates

This post details security updates for Team Foundation Server (TFS) 2017 and 2018, addressing a cross-site scripting (XSS) vulnerability and an issue with task groups incorrectly showing secret variables. It provides specific patch and upgrade instructions for TFS 2017 Update 3.1 and TFS 2018 (including Update 1.2 and Update 3.2), along with file version verification steps. It also notes that Azure DevOps Server 2019 RC1 will be fixed in RC2.