microsoftgraph msgraph-sdk-php-core vulnerabilities

Latest microsoftgraph msgraph-sdk-php-core CVEs

Newest publication first

1. CVE-2023-49283 Test code in published microsoft-graph-core package exposes phpinfo()

   Published 2023-12-05

   Medium·CVSS 5.3 EPSS 2.2% PoC

   microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the file at vendor/microsoft/microsoft-graph-c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.