What is CVE-2024-47215?

CVE-2024-47215 is a high-severity vulnerability in Snowplow Snowbridge, classified under CWE-703. CVSS score: 7.5/10. Published 2025-04-03.

How severe is CVE-2024-47215?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Snowplow Snowbridge

CVE-2024-47215

An issue was discovered in Snowbridge setups sending data to Google Tag Manager Server Side. It involves attaching an invalid GTM SS preview header to events, causing them to be retried indefinitely. As a result, the performance of forwarding events to GTM SS overall can be affected (latency, throughput).

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Snowplow Snowbridge
N/a — versions n/a

Weakness classification (CWE)

CWE-703

References

cve@mitre.org (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2024-47215?: CVE-2024-47215 is a high-severity vulnerability in Snowplow Snowbridge, classified under CWE-703. CVSS score: 7.5/10. Published 2025-04-03.
How severe is CVE-2024-47215?: High severity. CVSS v3 base score is 7.5 out of 10.