The vulnerability of the duplicate-data-source command in the Tableau Server analytical platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the “duplicate-data-source” command in the Tableau Server analytical platform is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

CVE-2025-52452: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salesforce Tableau Server on Windows, Linux tabdoc api - duplicate-data-source modules allows Absolute Path Traversal. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3....