CVE-2023-49283

Packagist/microsoft/microsoft-graph-core CVE-2023-49283: medium 5.4

Test code in published microsoft-graph-core package exposes phpinfo()

Action: Upgrade microsoft/microsoft-graph-core to 2.0.2 or later.

composer require microsoft/microsoft-graph-core:2.0.2

Affected

Fixed versions

Sources

• osv: GHSA-mhhp-c3cm-2r86
• https://github.com/microsoftgraph/msgraph-sdk-php-core/security/advisories/GHSA-mhhp-c3cm-2r86
• https://nvd.nist.gov/vuln/detail/CVE-2023-49103
• https://nvd.nist.gov/vuln/detail/CVE-2023-49283
• https://github.com/FriendsOfPHP/security-advisories/blob/master/microsoft/microsoft-graph-core/CVE-2023-49283.yaml
• https://github.com/microsoftgraph/msgraph-beta-sdk-php/compare/2.0.0...2.0.1
• https://github.com/microsoftgraph/msgraph-sdk-php-core
• https://github.com/microsoftgraph/msgraph-sdk-php-core/compare/2.0.1...2.0.2
• https://github.com/microsoftgraph/msgraph-sdk-php/compare/1.109.0...1.109.1
• https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments

CVE-2023-49283 · published 2023-12-05T22:46:57Z · modified 2026-09-10T03:49:59.652215225Z · JSON