Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-22594

Input parameters 'sign' and 'data' are not validating properly

    XMLWordPrintable

Details

    • Team B
    • Sprint 98 (Mar 2023), Sprint 99 (Apr 2023), Sprint 100 (May 2023), Sprint 101 (Jun 2023)
    • 1

    Description

      On any page with an "action" input parameter, adding a combination of "formdata" and "sign[]" or "data[]" parameters results in a PHP fatal error. For example,

      zabbix.php?action=host.list&formdata&data[]=
      TypeError: base64_decode(): Argument #1 ($string) must be of type string, array given in include/classes/mvc/CController.php:199
      Stack trace:
      #0 include/classes/mvc/CController.php(199): base64_decode()
      #1 include/classes/mvc/CController.php(445): CController::getFormInput()
      #2 include/classes/mvc/CController.php(82): CController->populateRawInput()
      #3 include/classes/core/ZBase.php(513): CController->__construct()
      #4 include/classes/core/ZBase.php(222): ZBase->processRequest()
      #5 include/config.inc.php(25): ZBase->run()
      #6 zabbix.php(22): require_once('...')
      #7 {main}

      Also i

      Attachments

        Issue Links

          Activity

            People

              Miks.Kronkalns Miks Kronkalns
              sasha Alexander Vladishev
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: