CVE-2024-57083

22

FAUCET Score

CVE-2024-57083 is a prototype pollution vulnerability affecting redocly redoc versions up to 2.2.0. This flaw, located in the Module.mergeObjects component, allows an unauthenticated attacker to trigger a Denial of Service (DoS) by supplying a specially crafted payload. Rated as HIGH severity with a CVSS score of 7.5, it requires no user interaction and has a low attack complexity. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		<= 2.2.0CPE matchmatch criteria	cpe:2.3:a:redocly:redoc::::::::

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

3.9

Impact Score

3.6

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.52%

Probability of exploitation in next 30 days

EPSS Percentile

40.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-28

Model: v2026.06.15

This CVE's current EPSS score of 0.0052 is in the 18th percentile among its peer group of 51,553 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (62)

github_advisorypatch availablevia nvd_reference

npmpatch availablevia ghsa

Product: redocFixed in: 2.4.0

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-central-db-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-collector-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-collector-slim-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-main-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-operator-bundle:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-rhel8-operator:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.5Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:4.5.9-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-central-db-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-collector-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-collector-slim-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-main-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-operator-bundle:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-rhel8-operator:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.6Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:4.6.5-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-central-db-rhel8:4.7.2-2

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-collector-rhel8:4.7.2-2

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-main-rhel8:4.7.2-3

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-operator-bundle:4.7.2-4

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-rhel8-operator:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-roxctl-rhel8:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-db-rhel8:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-db-slim-rhel8:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-rhel8:4.7.2-2

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-slim-rhel8:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-v4-db-rhel8:4.7.2-1

redhatpatch availablevia redhat_api

Product: Red Hat Advanced Cluster Security 4.7Fixed in: advanced-cluster-security/rhacs-scanner-v4-rhel8:4.7.2-3

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/argocd-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/argocd-rhel9:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/argo-rollouts-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/console-plugin-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/dex-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/gitops-operator-bundle:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/gitops-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/gitops-rhel8-operator:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/kam-delivery-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.14Fixed in: openshift-gitops-1/must-gather-rhel8:v1.14.4-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/argocd-extensions-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/argocd-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/argocd-rhel9:v1.15.2-1

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/argo-rollouts-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/console-plugin-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/dex-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/gitops-operator-bundle:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/gitops-rhel8:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/gitops-rhel8-operator:v1.15.2-4

redhatpatch availablevia redhat_api

Product: Red Hat OpenShift GitOps 1.15Fixed in: openshift-gitops-1/must-gather-rhel8:v1.15.2-4

redhatno patchvia redhat_api

Product: Red Hat build of Apicurio Registry 2Fixed in: io.apicurio-apicurio-registry

redhatend of lifevia redhat_api

Product: Red Hat Integration Camel K 1Fixed in: io.apicurio-apicurio-registry

Vendor Advisories (2)

npmGHSA-9rhg-254w-fh9xhigh

Redoc Prototype Pollution via `Module.mergeObjects` Component

redhatCVE-2024-57083Important

redoc: Prototype Pollution in redoc

References

github.com / Redocly/redoc/issues/2499

ExploitIssue TrackingPatch