PT-2025-30927

CVE-2025-52454

·

Published

2025-07-25

·

Updated

2025-10-31

Description by

CVSS 3.1
8.2
High
MetricsAV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Tableau Server versions prior to 2025.1.3 Tableau Server versions prior to 2024.2.12 Tableau Server versions prior to 2023.3.19
Description A Server-Side Request Forgery (SSRF) vulnerability exists in Tableau Server on Windows and Linux systems when using the Amazon S3 Connector modules. This issue allows for Resource Location Spoofing.
Recommendations Update Tableau Server to version 2025.1.3 or later. Update Tableau Server to version 2024.2.12 or later. Update Tableau Server to version 2023.3.19 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-918: Server-Side Request Forgery (SSRF)
Related identifiers
CVE-2025-52454
BDU:2025-13945
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com