CVE-2021-43669: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')

November 18, 2021 (updated November 23, 2021)

A vulnerability has been detected in HyperLedger Fabric. It can easily break down as many orderers as the attacker wants. This bug can be leveraged by constructing a message whose header is invalid to the interface Order. This bug has been admitted and fixed by the developers of Fabric.

References

github.com/hyperledger/fabric/pull/2828
jira.hyperledger.org/browse/FAB-18528
nvd.nist.gov/vuln/detail/CVE-2021-43669

Code Behaviors & Features

Detect and mitigate CVE-2021-43669 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →