Packagist/microsoft/microsoft-graph-beta: medium 5.3
Test code in published microsoft-graph-beta package exposes phpinfo()
Action: Upgrade microsoft/microsoft-graph-beta to 2.0.1 or later.
composer require microsoft/microsoft-graph-beta:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-7mc6-x925-7qvx
- https://github.com/microsoftgraph/msgraph-beta-sdk-php/security/advisories/GHSA-7mc6-x925-7qvx
- https://nvd.nist.gov/vuln/detail/CVE-2023-49103
- https://github.com/microsoftgraph/msgraph-beta-sdk-php
- https://github.com/microsoftgraph/msgraph-beta-sdk-php/compare/2.0.0...2.0.1
- https://github.com/microsoftgraph/msgraph-sdk-php-core/compare/2.0.1...2.0.2
- https://github.com/microsoftgraph/msgraph-sdk-php/compare/1.109.0...1.109.1
- https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments
published · modified · JSON