Attributed metadata history

Up to 100 retained publisher events per page for a76dda2a23f267f78b1a0f203b72aad132c8f12152a85e9dfdddaa2b3db0f8af. Withdrawals and unavailable references remain attributed to their publishers.

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:04 UTC

Three SSRF vulnerabilities were discovered in Azure DevOps, allowing access to internal metadata endpoints and potential CRLF injection. The issues affected the endpointproxy and Service Hooks functionality. DNS rebinding could bypass initial fixes. Microsoft awarded $15,000 in bug bounties for the findings.

Fingerprint: 1cfec9554c381630e3aec60d9542680363d7cf5a9824cf1bfce149c6411c819e

intelligence_src_d11443da85ea659d49

observed · 2026-10-12 15:37:03 UTC

available

Fingerprint: 46fd50ac705e064c7517d97d61b5ec511c9b1ada6209622159dd39573ba08e5c