Skip to content

Vendor

microsoftgraph vulnerabilities

2 published CVES affecting microsoftgraph, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of microsoftgraph alerts

Products

Latest microsoftgraph CVEs

Newest publication first

  2. CVE-2023-49282 Test code in published microsoft-graph package exposes phpinfo()

    Published
    MediumCVSS 5.4 EPSS 2.2% PoC

    msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the file at vendor/microsoft/microsoft-graph/tests/Ge...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.