Finding SSRFs in Azure DevOps
Published Fri, Jan 17th, 2025
Platforms
Summary
Three SSRF vulnerabilities were discovered in Azure DevOps, allowing access to internal metadata endpoints and potential CRLF injection. The issues affected the endpointproxy and Service Hooks functionality. DNS rebinding could bypass initial fixes. Microsoft awarded $15,000 in bug bounties for the findings.
Affected Services
Azure DevOps
Remediation
None required. Microsoft has patched the vulnerabilities.
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/korniko98
Entry Status
Stub (AI-Generated)
Disclosure Date
Tue, Oct 10th, 2023
Exploitability Period
Until 2024/02/15
Known ITW Exploitation
-
Detection Methods
Monitor for unusual outbound requests from Azure DevOps servers to internal endpoints or unexpected external domains.
Piercing Index Rating
-
Discovered by
Torjus Bryne Retterstøl, Binary Security AS
