CVE-2025-52453

Name of the Vulnerable Software and Affected Versions Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19

Description The issue is a Server-Side Request Forgery (SSRF) in the Flow Data Source modules of Tableau Server on Windows and Linux. Successful exploitation allows an attacker to perform Resource Location Spoofing. SSRF occurs when a server-side application fetches a remote resource without validating the provided URL. This can allow an attacker to cause the server to make requests to unintended locations, potentially exposing sensitive data or performing actions on behalf of the server.

Recommendations Tableau Server versions prior to 2025.1.3 should be updated. Tableau Server versions prior to 2024.2.12 should be updated. Tableau Server versions prior to 2023.3.19 should be updated.