Description (CNA)
Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Tableau | affected Tableau Server versions affected on both Windows and Linux are: 2019.4 through 2019.4.17 2020.1 through 2020.1.13 2020.2 through 2020.2.10 2020.3 through 2020.3.6 2020.4 through 2020.4.2 |
CWE
No CWE identifiers supplied.
References
- https://help.salesforce.com/articleView?id=000357424&type=1&mode=1
- http://seclists.org/fulldisclosure/2021/Apr/22
- http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html
ADP enrichment
No English description supplied.