CWE-379 in fabric-sdk-rest version All released versions (project is now archived)
Details
In Hyperledger fabric-sdk-rest version All released versions (project is now archived) a CWE-379 exists in the packages/fabric-rest/fabric-rest-server script that can be attacked via Local resulting in File overwrite from a privileged user.