Skip to content

Product

microsoftgraph msgraph-sdk-php vulnerabilities

1 published CVE affecting microsoftgraph msgraph-sdk-php, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest microsoftgraph msgraph-sdk-php CVEs

Newest publication first

  1. CVE-2023-49282 Test code in published microsoft-graph package exposes phpinfo()

    Published
    MediumCVSS 5.3 EPSS 2.2% PoC

    msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the file at vendor/microsoft/microsoft-graph/tests/Ge...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.