This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the pipeline and would be potentially lost.
CVSS
No CVSS.
References
Configurations
History
15 Apr 2025, 19:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Snowplow
Snowplow stream Collector |
|
| References | () https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users - Release Notes, Patch | |
| CPE | cpe:2.3:a:snowplow:stream_collector:*:*:*:*:*:*:*:* |
03 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-03 21:15
Updated : 2025-04-15 19:29
NVD link : CVE-2024-56528
Mitre link : CVE-2024-56528
JSON object : View
Products Affected
snowplow
- stream_collector
CWE
No CWE.