HTTP Request Smuggling in github.com/hyperledger/fabric

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-43669 · ADVISORY
• hyperledger/fabric#2828 · WEB
• hyperledger/fabric · PACKAGE
• hyperledger/fabric release v2.4.0-beta · WEB
• jira.hyperledger.org/browse/FAB-18528 · WEB

github.com/hyperledger/fabric のその他の脆弱性

• CVE-2024-45244中 5.3Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
• CVE-2023-46132中 6.5Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linkin…
• CVE-2022-36023中 5.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway …
• CVE-2022-31121高 7.5Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus re…
• CVE-2021-43667高 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose pa…