Improper Input Validation Vulnerability in Tableau Server by Salesforce

CVE-2025-52451

What is CVE-2025-52451?

An improper input validation vulnerability has been identified in Salesforce's Tableau Server that allows for Absolute Path Traversal through the tabdoc API modules responsible for file uploads. This vulnerability affects specific versions of Tableau Server, enabling malicious actors to potentially access restricted files on the server.

References