Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Salesforce | Tableau Server | < 2025.1.3, < 2024.2.12, < 2023.3.19 | 2025.1.3 |
Advisories 1
- WID-SEC-2025-1896 Tableau Server und Desktop: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 24, 2025