CVE-2025-52452 — Salesforce / Tableau Server

CVE-2025-52452

Salesforce / Tableau Server PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected (CNA)

Vendor / product	Versions
Salesforce / Tableau Server	affected 0 before 2025.1.3; affected 0 before 2024.2.12; affected 0 before 2023.3.19

CWE

CWE-22

References

https://help.salesforce.com/s/articleView?id=005105043&type=1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.