Skip to content

Commit

Permalink
Fix: #6090 - Incorrect raise_message() function name in automation (#…
Browse files Browse the repository at this point in the history
  • Loading branch information
TheWitness authored Feb 6, 2025
1 parent 34cef64 commit 94526a9
Show file tree
Hide file tree
Showing 3 changed files with 5 additions and 2 deletions.
3 changes: 3 additions & 0 deletions CHANGELOG
Original file line number Diff line number Diff line change
@@ -1,5 +1,8 @@
Cacti CHANGELOG

1.2.30
-issue#6090: Undefined function warnings in Automation

1.2.29
-security#GHSA-c5j8-jxj3-hh36: Authenticated RCE via multi-line SNMP responses
-security#GHSA-f9c7-7rc3-574c: SQL Injection vulnerability when using tree rules through Automation API
Expand Down
2 changes: 1 addition & 1 deletion automation_graph_rules.php
Original file line number Diff line number Diff line change
Expand Up @@ -131,7 +131,7 @@ function save() {
$field_name = str_replace(array('ht.', 'h.', 'gt.'), '', $save['field']);

if (!db_column_exists('host', $field_name) && !db_column_exists('host_template', $field_name) && !db_column_exists('graph_templates', $field_name)) {
raise_messsage('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR);
raise_message('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR);

cacti_log(sprintf('ERROR: An attempt was made to perform a SQL Injection in Graph Automation from client address \'%s\'', get_client_addr()), false, 'SECURITY');

Expand Down
2 changes: 1 addition & 1 deletion automation_tree_rules.php
Original file line number Diff line number Diff line change
Expand Up @@ -137,7 +137,7 @@ function automation_tree_rules_form_save() {
$field_name = str_replace(array('ht.', 'h.', 'gt.'), '', $save['field']);

if (!db_column_exists('host', $field_name) && !db_column_exists('host_template', $field_name) && !db_column_exists('graph_templates', $field_name)) {
raise_messsage('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR);
raise_message('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR);

cacti_log(sprintf('ERROR: An attempt was made to perform a SQL Injection in Tree automation from client address \'%s\'', get_client_addr()), false, 'SECURITY');

Expand Down

0 comments on commit 94526a9

Please sign in to comment.