What is CVE-2024-47212?

CVE-2024-47212 is a high-severity vulnerability in Snowplow Iglu Server, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-04-03.

How severe is CVE-2024-47212?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Snowplow Iglu Server

CVE-2024-47212

An issue was discovered in Iglu Server 0.13.0 and below. It involves sending very large payloads to a particular API endpoint of Iglu Server and can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Snowplow Iglu_server
N/a — versions n/a

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

cve@mitre.org (Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2024-47212?: CVE-2024-47212 is a high-severity vulnerability in Snowplow Iglu Server, classified under Uncontrolled Resource Consumption. CVSS score: 7.5/10. Published 2025-04-03.
How severe is CVE-2024-47212?: High severity. CVSS v3 base score is 7.5 out of 10.