← Database

CVE-2024-57708

MEDIUM CVSS: 5.7 Published: 2025-06-25 Modified: 2026-06-17

Description

An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, __proto__, and Object.assign components. NOTE: this is disputed by the Supplier who does not agree it is a prototype pollution vulnerability.

Affected Platforms

Unknown

Weakness Type

CWE-400, CWE-471, CWE-915, CWE-1321

References