The host is installed with Azure DevOps Server 2022, 2020, or 2019 and is prone to a spoofing vulnerability. A flaw is present in the application, which fails to handle a malicious link. Successful exploitation could allow an attacker to perform a spoofing attack upon the victim clicking on the malicious link.