Lucene search
+L

72 matches found

Github Security Blog
Github Security Blog
added 5 days ago6 views

Microsoft Kiota: Code Generation Literal Injection in Kiota PHP Generator

Impact The Kiota PHP code generator is vulnerable to a code generation literal injection attack. The generator embeds string values from OpenAPI fields e.g. description, default values, and property names directly into PHP double-quoted string literals without properly escaping the $ character...

8.7CVSS6AI score0.01016EPSS
SaveExploits0References6Affected Software2
Rows per page
Query Builder