pentester.land· Jan 31, 2024· by Nadav Noy

Azure Devops Zero-Click CI/CD Vulnerability

Open Original Article ↗
Target Program: Microsoft (Azure DevOps Pipelines)
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#CI/CD#Supply chain attack#Privilege escalation#Information disclosure