CVE-2023-49282 | Microsoft Graph msgraph-sdk-php up to 1.109.0/2.0.0-RC4 GetPhpInfo.php phpInfo information disclosure (GHSA-cgwq-6prq-8h9q)

CVE-2023-49282 | Microsoft Graph msgraph-sdk-php up to 1.109.0/2.0.0-RC4 GetPhpInfo.php phpInfo information disclosure (GHSA-cgwq-6prq-8h9q)

A vulnerability, which was classified as problematic, was found in Microsoft Graph msgraph-sdk-php up to 1.109.0/2.0.0-RC4. Affected is the function phpInfo of the file vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2023-49282. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.