high7.5
CVE-2024-47213
An issue was discovered affecting Enrich 5.1.0 and below.
Impact
An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snowplow | Enrich | before 5.1.1 |