[ZBX-3955] Database table names are not validated in popup windows Created: 2011 Jul 15  Updated: 2020 Jul 16  Resolved: 2012 Jan 30

Status: Closed
Project: ZABBIX BUGS AND ISSUES
Component/s: Frontend (F)
Affects Version/s: 1.8.5
Fix Version/s: 1.8.11, 1.9.9 (beta)

Type: Defect (Security) Priority: Critical
Reporter: Alexey Fukalov Assignee: Unassigned
Resolution: Fixed Votes: 2
Labels: gui, security, validation
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified


 Comments   
Comment by Aleksandrs Saveljevs [ 2011 Jul 15 ]

Reported by Damian Tommasino in https://support.zabbix.com/browse/ZBX-3840?focusedCommentId=43000&page=com.atlassian.jira.plugin.system.issuetabpanels%3Acomment-tabpanel#action_43000.

Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 23 ]

(1) Please review my changes in r24957. If everything is ok, you can merge.
<Slava>CLOSED

Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 25 ]

I had another look and realized, that there is a better way to fix it.

REOPENED.

Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 25 ]

I've implemented a stricter parameter validation. Please review.

RESOLVED.

Comment by Alexey Fukalov [ 2012 Jan 30 ]

(2) [GUI]
Please review my changes in rev. 25068.

<pavels> Thanks, CLOSED.

Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 30 ]

Merged to 1.8 r25074.

Comment by Pavels Jelisejevs (Inactive) [ 2012 Jan 30 ]

The fix for the trunk is available in /branches/dev/ZBX-3955-trunk.

RESOLVED.

Comment by Pavels Jelisejevs (Inactive) [ 2012 Feb 01 ]

Merged to trunk r25132.

CLOSED.

Generated at Thu Mar 28 16:56:57 EET 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.