Hyperledger Fabric does not verify request has a timestamp within the expected time window

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-45244 · ADVISORY
• hyperledger/fabric commit 155457a · WEB
• hyperledger/fabric · PACKAGE
• shanker-sec/HLF_TxTime_spoofing · WEB
• shanker-sec/hlf-time-oracle · WEB
• GitHub Advisory GHSA-48gg-32q2-4r6m · ADVISORY

Mais vulnerabilidades de github.com/hyperledger/fabric

• CVE-2023-46132MÉDIO 6.5Hyperledger Fabric is an open source permissioned distributed ledger framework. Combining two molecules to one another, called "cross-linkin…
• CVE-2022-36023MÉDIO 5.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway …
• CVE-2022-31121ALTO 7.5Hyperledger Fabric is a permissioned distributed ledger framework. In affected versions if a consensus client sends a malformed consensus re…
• CVE-2021-43669ALTO 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the att…
• CVE-2021-43667ALTO 7.5A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.1.0. This bug can be leveraged by constructing a message whose pa…