Skip to content
OpenAdvisories
High · 7.3 CVE-2025-26498 EUVD-2025-25748GHSA-6wgv-qx3g-27rc

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo …

Published Aug 22, 2025 · Updated Aug 25, 2025 · Assigned by Salesforce

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (establish-connection-no-undo modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected products

VendorProductAffectedFixed
Salesforce Tableau Server < 2025.1.3, < 2024.2.12, < 2023.3.19 2025.1.3

Advisories 1

References