GHSA-j96p-r523-8r3w
HTTP Request Smuggling in github.com/hyperledger/fabric
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/hyperledger/fabric | < 2.4.0 | 2.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability has been detected in HyperLedger Fabric v1.4.0, v2.0.0, v2.0.1, v2.3.0. It can easily break down as many orderers as the attacker wants. This bug can be leveraged by constructing a message whose header is invalid to the interface Order. This bug has been admitted and fixed by the developers of Fabric.
References
External links from the advisory. They lead to third-party sites.