CVE-2024-57708

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400CWE-471CWE-915CWE-1321

Affected software

No affected versions have been published.

Timeline

Published
Jun 25, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-57716.3A vulnerability classified as critical was found in LabVantage LIMS 2017. This vulnerability affects unknown code of the file /labvantage/rcCVE-2024-577167.5An issue in trenoncourt AutoQueryable v.1.7.0 allows a remote attacker to obtain sensitive information via the Unselectable function.CVE-2024-577196.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.CVE-2024-57729.8A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects sCVE-2024-577206.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.CVE-2024-577216.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.CVE-2024-577227.5lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.CVE-2024-577236.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.CVE-2024-577246.5lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.CVE-2024-577256.5An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication,CVE-2024-577269.9SimpleHelp remote support software v5.5.7 and before has a vulnerability that allows low-privileges technicians to create API keys with exceCVE-2024-577277.5SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated re
CVE-2024-57708: Medium severity, CVSS 5.7 | Vulnix