Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Salesforce | Tableau Server | < 2025.1.3, < 2024.2.12, < 2023.3.19 | 2025.1.3 |
Advisories 2
- WID-SEC-2026-0411 Tableau Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 12, 2026
- NCSC-2025-0236 Kwetsbaarheden verholpen in Salesforce Tableau Server NCSC-NL (Netherlands) · Jul 28, 2025