CVE-2022-30187: Azure Storage Library Information Disclosure Vulnerability

Severity: low (CVSS 1.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-07-12 · updated 2026-06-17
Weakness: CWE-327

Description

Azure Storage Library Information Disclosure Vulnerability

Affected products

Microsoft Azure Storage Blobs: before 12.13.0; before 12.18.0 — fixed in 12.13.0, 12.18.0
Microsoft Azure Storage Queue: before 12.4.0; before 12.11.0 — fixed in 12.11.0, 12.4.0
Microsoft Azure Storage Blobs client library for .NET: from 12.0.0 before 12.13.0 — fixed in 12.13.0
Microsoft Azure Storage Blobs client library for Java: from 12.0.0 before 12.18.0 — fixed in 12.18.0
Microsoft Azure Storage Blobs client library for Python: from 12.0.0 before 12.13.0 — fixed in 12.13.0
Microsoft Azure Storage Queues client library for .NET: from 12.0.0 before 12.13.0 — fixed in 12.13.0
Microsoft Azure Storage Queues client library for Python: from 12.0.0 before 12.4.0 — fixed in 12.4.0

How to fix

Upgrade to a fixed version: Microsoft Azure Storage Blobs 12.13.0, 12.18.0; Microsoft Azure Storage Queue 12.11.0, 12.4.0; Microsoft Azure Storage Blobs client library for .NET 12.13.0; Microsoft Azure Storage Blobs client library for Java 12.18.0; Microsoft Azure Storage Blobs client library for Python 12.13.0; Microsoft Azure Storage Queues client library for .NET 12.13.0; Microsoft Azure Storage Queues client library for Python 12.4.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-30187 or the next vulnerability affects your stack