Path Traversal Vulnerability in Salesforce Tableau Server on Windows and Linux

CVE-2025-52450

What is CVE-2025-52450?

A vulnerability exists in Salesforce Tableau Server allowing for improper restriction of pathnames, leading to potential absolute path traversal attacks. This flaw particularly affects the 'create-data-source-from-file-upload' modules on both Windows and Linux platforms, making sensitive files accessible to unauthorized users. The issue is present in various versions of Tableau Server prior to the specified updates, creating significant risk for data exposure.

References