CVE-2022-23254

MEDIUM 4.9CVE-2022-23254 · Published 09/02/2022 · updated 17/06/2026

In short

CVE-2022-23254 is a MEDIUM (CVSS 4.9) vulnerability affecting powerbi-client js sdk (microsoft).
Chance of exploitation in the next 30 days (EPSS): 2.6%, higher than 85.2% of all vulnerabilities.
Fix: update to 2.19.1 or later.

Package	Affected versions	Patched versions
powerbi-client js sdk microsoft	`< 2.19.1`	`2.19.1`

Microsoft Power BI Information Disclosure Vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.