Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
| Vendor | Product | Versions |
|---|---|---|
| microsoft | azure pipelines | - |
Loading…
Corrected exploitAvailable from true to false, and added tags indicating this is a managed service with no user-available countermeasures.
Added technical description of command injection mechanism, identified CWE-78 as additional CWE, and confirmed exploit availability based on active attack vector description.
Initial creation
