An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47214, but involves an authenticated endpoint. It can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users | Release Notes Vendor Advisory |
Configurations
History
08 Apr 2025, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users - Release Notes, Vendor Advisory | |
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:snowplow:iglu_server:*:*:*:*:*:*:*:* | |
| First Time |
Snowplow
Snowplow iglu Server |
03 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-03 21:15
Updated : 2025-04-08 18:55
NVD link : CVE-2024-47217
Mitre link : CVE-2024-47217
JSON object : View
Products Affected
snowplow
- iglu_server
CWE