PT-2025-30928 · Tableau · Tableau Server
CVE-2025-52455
·
Publicado
2025-06-26
·
Atualizado
2025-10-29
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Tableau Server versions prior to 2025.1.3
Tableau Server versions prior to 2024.2.12
Tableau Server versions prior to 2023.3.19
Description
Tableau Server is susceptible to a Server-Side Request Forgery (SSRF) issue within the EPS Server modules on Windows and Linux systems. This flaw enables Resource Location Spoofing.
Recommendations
Update Tableau Server to version 2025.1.3 or later.
Update Tableau Server to version 2024.2.12 or later.
Update Tableau Server to version 2023.3.19 or later.
Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tableau Server