Snowbridge Google Tag Manager Server-Side Integration Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Snowbridge setups that send data to Google Tag Manager (GTM) Server Side. The issue arises from attaching an invalid GTM SS preview header to events, which causes these events to be retried indefinitely. This behavior can negatively impact the overall performance of event forwarding to GTM SS, leading to increased latency and decreased throughput.

Impact

Exploitation of this vulnerability can cause events to be retried indefinitely, disrupting the normal flow of data to Google Tag Manager Server Side. This can result in increased latency and decreased throughput, affecting the performance of event tracking and management.