Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
History

Wed, 27 Aug 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Sat, 23 Aug 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux
Microsoft
Microsoft windows
Salesforce
Salesforce tableau Server
Vendors & Products Linux
Linux linux
Microsoft
Microsoft windows
Salesforce
Salesforce tableau Server

Fri, 22 Aug 2025 20:30:00 +0000

Type Values Removed Values Added
Description Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (abdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Weaknesses CWE-22
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Salesforce

Published:

Updated: 2025-08-27T14:55:29.097Z

Reserved: 2025-06-16T20:18:48.946Z

Link: CVE-2025-52450

cve-icon Vulnrichment

Updated: 2025-08-25T12:53:30.353Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-08-22T21:15:32.117

Modified: 2025-08-27T15:15:39.683

Link: CVE-2025-52450

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-08-23T10:55:01Z