CVE-2025-52452

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-52452
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Server on Windows, Linux (tabdoc api - duplicate-data-source modules) allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

8.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://help.salesforce.com/s/articleView?id=005105043&type=1
Configurations

No configuration.

History

29 Jul 2025, 14:14

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de limitación incorrecta de una ruta a un directorio restringido ('Path Traversal') en Salesforce Tableau Server para Windows y Linux (tabdoc api - duplicate-data-source modules) permite Absolute Path Traversal. Este problema afecta a Tableau Server: versiones anteriores a 2025.1.3, 2024.2.12 y 2023.3.19.

25 Jul 2025, 21:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.5

25 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 19:15

Updated : 2025-07-29 14:14

NVD link : CVE-2025-52452

Mitre link : CVE-2025-52452

CVE.ORG link : CVE-2025-52452

JSON object : View

Products Affected

No product.

CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')