CVE-2024-57651

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 14, 2025
Updated: Jan 15, 2025
CWE ID 89

Summary

CVE-2024-57651 is a newly disclosed vulnerability affecting the jp_add component in openlink virtuoso-opensource version 7.2.11. Maliciously crafted SQL statements can trigger a Denial of Service (DoS) condition, causing the application to crash or become unresponsive, potentially disrupting normal operations. Attackers can exploit this vulnerability to induce a DoS condition, leading to downtime and potential data loss. It is recommended that affected organizations upgrade to a patched version of openlink virtuoso-opensource as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Virtuoso-Opensource

Affected Vendors

  • OpenLink Software Inc