CVE-2024-47215

7.5 highEPSS 0.4%

High (7.5) in snowplow snowbridge. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected (latency, throughput).

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-703
Published: 2025-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

snowplow:snowbridge

References

https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users

Check your stack JSON