The host is installed with Azure DevOps Server 2022 or 2020 and is prone to a spoofing vulnerability. A flaw is present in the application, which fails to handle a malicious file. Successful exploitation could allow an attacker to combine this with other vulnerabilities to perform an attack.