Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-10319

"stime" parameter for charts.php is not validated and can make Web server consume 100% CPU

    Details

      Description

      Suppose we usually go into "Monitoring" -> "Graphs" using the following link:

      http://localhost/zabbix/charts.php?graphid=525&period=3600&stime=20160127113255
      

      The last "stime" parameter looks like an encoded date and time together in a validatable format. However, it is not validated. For instance, if we modify the parameter like so, the Web server will hang using 100% CPU:

      http://localhost/zabbix/charts.php?graphid=525&period=3600&stime=20000000160127113255
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              asaveljevs Aleksandrs Saveljevs
            • Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: