1. Home
  2. CVE Database
  3. CVE-2024-56528
HIGH · 7.5

CVE-2024-56528

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and...

Vulnerability Description

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and can render it unresponsive to the rest of the requests. As a result, data would not enter the pipeline and would be potentially lost.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
SnowplowStream Collector>= 3.0.0, < 3.3.0

Related Weaknesses (CWE)

CWE-400

References

FAQ

What is CVE-2024-56528?

CVE-2024-56528 is a vulnerability with a CVSS score of 7.5 (HIGH). This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits). It involves sending very large payloads to the Collector and...

How severe is CVE-2024-56528?

CVE-2024-56528 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-56528?

Check the references section above for vendor advisories and patch information. Affected products include: Snowplow Stream Collector.