Vulnerabilities

TI-2024-37415 CVE-2024-56528 · GHSA-qg7f-449v-85xg

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind…

LOW 39

This vulnerability affects Snowplow Collector 3.x before 3.3.0 (unless it’s set up behind a reverse proxy that establishes payload limits).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-03 No fix listed CWE-400

TI-2024-31571 CVE-2024-47217 · GHSA-fphf-v8m4-xjvx

LOW 29

An issue was discovered in Iglu Server 0.13.0 and below.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00407 Published 2025-04-03 No fix listed

TI-2024-31570 CVE-2024-47215 · GHSA-3wrm-64r6-6q6c

LOW 39

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-03 No fix listed CWE-703

TI-2024-31569 CVE-2024-47214 · GHSA-qcwf-jj36-gr7m

LOW 39

An issue was discovered in Iglu Server 0.13.0 and below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-03 No fix listed

TI-2024-31568 CVE-2024-47213 · GHSA-fv89-7wfw-xmjg

LOW 39

An issue was discovered affecting Enrich 5.1.0 and below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-03 No fix listed CWE-404

TI-2024-31567 CVE-2024-47212 · GHSA-rwxg-r4cq-frp9

LOW 33

An issue was discovered in Iglu Server 0.13.0 and below.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00425 Published 2025-04-03 No fix listed CWE-400