Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.
CWE-918