← Back

CVE-2025-52453

nvd nist
Published: Jul 25, 2025Modified: Oct 31, 2025

JSON object

Loading...
8.2
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Exploitability: 1.8 / Impact: 5.8
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

Affected (3)

Tableau
1 product
Tableau Server
Configuration A
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Tableau
Tableau Server
Before 2023.3.19
Tableau Server
From 2024.2 to 2024.2.12
Tableau Server
From 2025.1 to 2025.1.3
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-918
Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (1)

Source: security@salesforce.com
Vendor Advisory

Timeline

No history available yet.