CVE-2024-57651

CVE-2024-57651 is a vulnerability in the jp_add component of OpenLink Virtuoso OpenSource version 7.2.11. The flaw allows attackers to trigger a Denial of Service (DoS) condition by sending crafted SQL statements. It is associated with CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')) and carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high severity primarily due to availability impact.

Unauthenticated remote attackers can exploit this vulnerability over the network with low attack complexity and no user interaction required. Exploitation involves submitting specially crafted SQL statements to the affected jp_add component, resulting in a DoS that disrupts service availability without compromising confidentiality or integrity.

Mitigation details and further information are available in the referenced GitHub issue at https://github.com/openlink/virtuoso-opensource/issues/1196.