[ZBX-22594] Input parameters 'sign' and 'data' are not validating properly Created: 2023 Mar 27 Updated: 2024 Apr 10 Resolved: 2023 Jun 09 |
|
Status: | Closed |
Project: | ZABBIX BUGS AND ISSUES |
Component/s: | Frontend (F) |
Affects Version/s: | None |
Fix Version/s: | 6.0.19rc1, 6.4.4rc1, 7.0.0alpha2, 7.0 (plan) |
Type: | Problem report | Priority: | Trivial |
Reporter: | Alexander Vladishev | Assignee: | Miks Kronkalns |
Resolution: | Fixed | Votes: | 0 |
Labels: | None | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified |
Issue Links: |
|
||||||||
Team: | |||||||||
Sprint: | Sprint 98 (Mar 2023), Sprint 99 (Apr 2023), Sprint 100 (May 2023), Sprint 101 (Jun 2023) | ||||||||
Story Points: | 1 |
Description |
On any page with an "action" input parameter, adding a combination of "formdata" and "sign[]" or "data[]" parameters results in a PHP fatal error. For example, zabbix.php?action=host.list&formdata&data[]= TypeError: base64_decode(): Argument #1 ($string) must be of type string, array given in include/classes/mvc/CController.php:199 Stack trace: #0 include/classes/mvc/CController.php(199): base64_decode() #1 include/classes/mvc/CController.php(445): CController::getFormInput() #2 include/classes/mvc/CController.php(82): CController->populateRawInput() #3 include/classes/core/ZBase.php(513): CController->__construct() #4 include/classes/core/ZBase.php(222): ZBase->processRequest() #5 include/config.inc.php(25): ZBase->run() #6 zabbix.php(22): require_once('...') #7 {main} Also i |
Comments |
Comment by Miks Kronkalns [ 2023 Mar 30 ] |
Fixed in development branch feature/ZBX-22594-6.0. |
Comment by Miks Kronkalns [ 2023 Jun 02 ] |
Fixed in:
|