[ZBX-3955] Database table names are not validated in popup windows Created: 2011 Jul 15 Updated: 2020 Jul 16 Resolved: 2012 Jan 30 |
|
Status: | Closed |
Project: | ZABBIX BUGS AND ISSUES |
Component/s: | Frontend (F) |
Affects Version/s: | 1.8.5 |
Fix Version/s: | 1.8.11, 1.9.9 (beta) |
Type: | Defect (Security) | Priority: | Critical |
Reporter: | Alexey Fukalov | Assignee: | Unassigned |
Resolution: | Fixed | Votes: | 2 |
Labels: | gui, security, validation | ||
Remaining Estimate: | Not Specified | ||
Time Spent: | Not Specified | ||
Original Estimate: | Not Specified |
Comments |
Comment by Aleksandrs Saveljevs [ 2011 Jul 15 ] |
Reported by Damian Tommasino in https://support.zabbix.com/browse/ZBX-3840?focusedCommentId=43000&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#action_43000. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 23 ] |
(1) Please review my changes in r24957. If everything is ok, you can merge. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 25 ] |
I had another look and realized, that there is a better way to fix it. REOPENED. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 25 ] |
I've implemented a stricter parameter validation. Please review. RESOLVED. |
Comment by Alexey Fukalov [ 2012 Jan 30 ] |
(2) [GUI] <pavels> Thanks, CLOSED. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 30 ] |
Merged to 1.8 r25074. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 30 ] |
The fix for the trunk is available in /branches/dev/ RESOLVED. |
Comment by Pavels Jelisejevs (Inactive) [ 2012 Feb 01 ] |
Merged to trunk r25132. CLOSED. |