CVE-2024-57708

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57708
An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability.
CVSS

No CVSS.

References
Link Resource
https://discord.com/assets/oneTrust/v4/scripttemplates/6.33.0/otBannerSdk.js
https://github.com/brotheralameen1/Discordforschool/security/advisories/GHSA-63xr-98vc-whx5
https://packetstorm.news/files/id/201222/
Configurations

No configuration.

History

25 Jul 2025, 21:15

Type Values Removed Values Added
References
  • () https://packetstorm.news/files/id/201222/ -

26 Jun 2025, 05:15

Type Values Removed Values Added
Summary An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability.

25 Jun 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-25 16:15

Updated : 2025-07-25 21:15

NVD link : CVE-2024-57708

Mitre link : CVE-2024-57708

JSON object : View

Products Affected

No product.

CWE

No CWE.