high7.5

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side.

Impact

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected (latency, throughput).

Affected products

Vendor	Product	Affected versions
Snowplow	Snowbridge	All versions

Weakness classification

CWE-703

References

NVD record
CVE.org record
https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users