CVE-2025-52449: Malicious File Upload
Unrestricted Upload of File with Dangerous Type vulnerability in Salesforce Tableau Server on Windows, Linux (Extensible Protocol Service modules) allows Alternative Execution Due to Deceptive Filenames (RCE). This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-52449?
CVE-2025-52449 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-52449?
To mitigate CVE-2025-52449, upgrade your Salesforce Tableau Server to a version later than 2025.1.3, 2024.2.12, or 2023.3.19.
What versions of Salesforce Tableau Server are affected by CVE-2025-52449?
Versions of Salesforce Tableau Server prior to 2025.1.3, 2024.2.12, and 2023.3.19 are affected by CVE-2025-52449.
What types of attacks can CVE-2025-52449 facilitate?
CVE-2025-52449 can facilitate remote code execution attacks through unrestricted file uploads with deceptive filenames.
Is CVE-2025-52449 specific to any operating system?
CVE-2025-52449 affects Salesforce Tableau Server on both Windows and Linux operating systems.