Linux Foundation Decentralized Trust · Report #1664244

fix(security):Path Traversal Bug

N/Astatus

highseverity

3upvotes

11 Aug 2022disclosed

How it was found

Unsanitized input from CLI argument flows into io.ioutil.ReadFile, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to read arbitrary files.

See this fix : https://github.com/hyperledger/fabric/pull/3573

Impact

There is a path traversal vulnerability in the source code of fabric

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original