Updated: February patches for Azure DevOps Server
Feb 14, 2023Gloridel Morales

Summary
This post details the February 2023 patches for Azure DevOps Server, including fixes for Cross-Site Scripting (CVE-2023-21564) and Remote Code Execution (CVE-2023-21553) vulnerabilities. It also includes updates to MSBuild and VSBuild tasks for Visual Studio 2022 support, a fix for an XSS attack vector related to reauthentication loading, an error fix for Azure DevOps Server 2022 Proxy, and a fix for shelvesets accessibility via the web UI. Specific instructions for installing and verifying patches for Azure DevOps Server 2022 Patch 2 and Azure DevOps Server 2020.1.2 Patch 5 are provided.