← Database

CVE-2024-47213

HIGH CVSS: 7.5 Published: 2025-04-03 Modified: 2026-06-17

Description

An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted.

Affected Platforms

Snowplow Enrich

Weakness Type

CWE-404

References