72 matches found
Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator
Impact The Kiota PHP code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI fields e.g. description, default values, and property names directly into PHP double-quoted string literals without properly escaping the $ character...