CVE-2023-21806 should also be resolved on versions of Report Server at least 6 months old

[Anonymous]

This vulnerability is too high of a severity to not also address it earlier versions of Report Server with hotfixes or patches. Sept 2022 is still only 6 months away from the most recent version of Power BI Report Server. Forcing everyone to upgrade to Jan 2023 is heavy handed and something a start-up would do, not a Fortune 500 enterprise. Does Microsoft care about Report Server?

Likely many paying enterprises will not follow this guidance and will be vulnerable for some time because Microsoft refused to update such recent versions which are vulnerable because of their code. Very dissapointing.

CVE-2023-21806 - Security Update Guide - Microsoft - Power BI Report Server Spoofing Vulnerability