CVE-2023-49283

CVE-2023-49283 is a medium-severity vulnerability affecting the Microsoft Graph Library for PHP (microsoft-graph-core) versions prior to 2.0.2. It allows for information disclosure due to test code that enables the phpInfo() function, exposing system details like configuration and environment variables. Exploitation requires a misconfigured server where the /vendor directory is web-accessible, enabling an unauthenticated attacker to craft an HTTP request to execute the function. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.