CVE-2024-56528
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 15, 2025
CWE ID 400
Summary
CVE-2024-56528 is a vulnerability that impacts Snowplow Collector versions 3.x prior to 3.3.0. If left unpatched, this issue can make the Collector unresponsive to incoming requests by processing unusually large payloads. As a consequence, data intended for the pipeline may not be received and could be lost. It's crucial to note that this vulnerability can be mitigated by setting up the Collector behind a reverse proxy with enforced payload limits.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Snowplow Analytics