CVE-2024-47213
An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving thi...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered affecting Enrich 5.1.0 and below. It involves sending a maliciously crafted Snowplow event to the pipeline. Upon receiving this event and trying to validate it, Enrich crashes and attempts to restart indefinitely. As a result, event processing would be halted.
Références
- advisory github.com
- advisory nvd.nist.gov
- web support.snowplow.io