CVE-2025-26498

Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux establish-connection-no-undo modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-26498

Salesforce Tableau Server is vulnerable to an Unrestricted Upload of File with Dangerous Type vulnerability affecting versions prior to 2025.1.3 , 2024.2.12 , and 2023.3.19 on both Windows and Linux platforms. The root cause lies in the establish-connection-no-undo modules, which allow for Absolu...