CVE-2024-56528

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the pipeline and would be potentially lost.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2025-04-03

Last modified

2025-04-07

Weaknesses

CWE-400

Affected products

• Stream Collector (Snowplow)

References

• https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-S…