CVE-2025-52451 - AskarLabs CVE Database

CVE-2025-52451

Vendor Salesforce

Product Tableau Server

Weakness CWE-20 · Input validation

Published August 22, 2025

Last update August 22, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Input Validation vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - create-data-source-from-file-upload modules) allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Key dates

02Disclosure timeline

August 22, 2025 CVE published

August 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-52451 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/20.html

Identifiers

CVE CVE-2025-52451

CWE CWE-20

Affected versions

Vendor Salesforce

Product Tableau Server

Affected < 2025.1.3

Vendor Salesforce

Product Tableau Server

Affected < 2024.2.12

Vendor Salesforce

Product Tableau Server

Affected < 2023.3.19