PT-2025-14800 · Unknown · Iglu Server

Published 2025-04-03 · Updated 2025-04-04 · CVE-2024-47212

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Iglu Server versions 0.13.0 and below

Description The issue involves sending very large payloads to a particular API endpoint of Iglu Server, which can render it completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would eventually halt.

Recommendations For Iglu Server versions 0.13.0 and below, consider restricting access to the vulnerable API endpoint until a patch is available. As a temporary workaround, limit the size of payloads that can be sent to the Iglu Server API endpoint to prevent it from becoming unresponsive.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-47212

Affected Products

Iglu Server

References · 10

• https://osv.dev/vulnerability/CVE-2024-47212 · Vendor Advisory
• https://support.snowplow.io/hc/en-us/articles/26318139354909-Update-Critical-Snowplow-Security-Updates-Impact-on-Open-Source-Software-Users · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47212 · Security Note
• https://twitter.com/CVEnew/status/1908072051513934304 · Twitter Post
• https://t.me/cvedetector/22050 · Telegram Post
• https://t.me/cvetracker/20741 · Telegram Post
• https://twitter.com/CVEnew/status/1908072053166461303 · Twitter Post
• https://t.me/cvetracker/20743 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1907912192046891497 · Twitter Post
• https://t.me/cvedetector/22045 · Telegram Post