CVE-2024-45244
Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
hyperledger-fabric-peer
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.10"}]}]
Bitnami
hyperledger-fabric-tools
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.10"}]}]
Bitnami
hyperledger-fabric-orderer
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.5.10"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- package github.com
- patch github.com