Skip to content
OpenAdvisories
High MSRC-CVE-2022-23254 1 CVE

Microsoft Power BI Information Disclosure Vulnerability

Published Feb 8, 2022 · Updated Feb 8, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What actions do I need to take to be protected from this vulnerability?
The main update will be automatically pushed to all affected products and services.
We recommend that customers update PowerBI Client JS SDK to version 2.19.1.
The package can be downloaded from NPM or NuGet Gallery.
Our team will contact customers that are affected by this vulnerability.
We recommend that affected customers save their Power Apps to ensure the fix takes effect as expected.

Security updates
2.19.1 — https://www.nuget.org/packages/Microsoft.PowerBI.JavaScript/

Vulnerabilities 1

Revision history

  1. #1

    Information published.

  2. #2

    Corrected the CVE title and description to address the vulnerability as Information Disclosure. In the Affected Products table, corrected the Impact to Information Disclosure. This is an informational change only.

References