Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker

链接： https://github.com/advisories/GHSA-f5qr-822f-j6gv

CVSS 评分： 9.1

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2025-47158

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-47158

• https://github.com/advisories/GHSA-f5qr-822f-j6gv

描述：

Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.