Hyperledger Fabric through 3.0.0 and 2.5.x through 2.5.9 do not verify that a request has a timestamp within the expected time window.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:hyperledger:fabric:*:*:*:*:*:*:*:*" ] }