Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-22594

Input parameters 'sign' and 'data' are not validating properly

XMLWordPrintable

    • Team B
    • Sprint 98 (Mar 2023), Sprint 99 (Apr 2023), Sprint 100 (May 2023), Sprint 101 (Jun 2023)
    • 1

      On any page with an "action" input parameter, adding a combination of "formdata" and "sign[]" or "data[]" parameters results in a PHP fatal error. For example,

      zabbix.php?action=host.list&formdata&data[]=
      TypeError: base64_decode(): Argument #1 ($string) must be of type string, array given in include/classes/mvc/CController.php:199
      Stack trace:
      #0 include/classes/mvc/CController.php(199): base64_decode()
      #1 include/classes/mvc/CController.php(445): CController::getFormInput()
      #2 include/classes/mvc/CController.php(82): CController->populateRawInput()
      #3 include/classes/core/ZBase.php(513): CController->__construct()
      #4 include/classes/core/ZBase.php(222): ZBase->processRequest()
      #5 include/config.inc.php(25): ZBase->run()
      #6 zabbix.php(22): require_once('...')
      #7 {main}

      Also i

            Miks.Kronkalns Miks Kronkalns
            sasha Alexander Vladishev
            Team B
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: