Skip to content
OpenAdvisories
High · 8.5 CVE-2025-52451 EUVD-2025-28433GHSA-wh5c-wfpr-wpfp

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload mo…

Published Aug 22, 2025 · Updated Aug 22, 2025 · Assigned by Salesforce

Description

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected products

VendorProductAffectedFixed
Salesforce Tableau Server < 2025.1.3, < 2024.2.12, < 2023.3.19 2025.1.3

Advisories 1

References