From 94526a92b96c01848748602977819cd403932f0a Mon Sep 17 00:00:00 2001 From: TheWitness Date: Thu, 6 Feb 2025 08:49:05 -0500 Subject: [PATCH] Fix: #6090 - Incorrect raise_message() function name in automation (#6092) --- CHANGELOG | 3 +++ automation_graph_rules.php | 2 +- automation_tree_rules.php | 2 +- 3 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index ad1b634dc..1aa4c5151 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,5 +1,8 @@ Cacti CHANGELOG +1.2.30 +-issue#6090: Undefined function warnings in Automation + 1.2.29 -security#GHSA-c5j8-jxj3-hh36: Authenticated RCE via multi-line SNMP responses -security#GHSA-f9c7-7rc3-574c: SQL Injection vulnerability when using tree rules through Automation API diff --git a/automation_graph_rules.php b/automation_graph_rules.php index 29457363e..8b3729624 100644 --- a/automation_graph_rules.php +++ b/automation_graph_rules.php @@ -131,7 +131,7 @@ function save() { $field_name = str_replace(array('ht.', 'h.', 'gt.'), '', $save['field']); if (!db_column_exists('host', $field_name) && !db_column_exists('host_template', $field_name) && !db_column_exists('graph_templates', $field_name)) { - raise_messsage('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR); + raise_message('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR); cacti_log(sprintf('ERROR: An attempt was made to perform a SQL Injection in Graph Automation from client address \'%s\'', get_client_addr()), false, 'SECURITY'); diff --git a/automation_tree_rules.php b/automation_tree_rules.php index 5f8b8bf34..f0f2e907d 100644 --- a/automation_tree_rules.php +++ b/automation_tree_rules.php @@ -137,7 +137,7 @@ function automation_tree_rules_form_save() { $field_name = str_replace(array('ht.', 'h.', 'gt.'), '', $save['field']); if (!db_column_exists('host', $field_name) && !db_column_exists('host_template', $field_name) && !db_column_exists('graph_templates', $field_name)) { - raise_messsage('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR); + raise_message('sql_injection', __('An attempt was made to perform a SQL injection in Tree automation'), MESSAGE_LEVEL_ERROR); cacti_log(sprintf('ERROR: An attempt was made to perform a SQL Injection in Tree automation from client address \'%s\'', get_client_addr()), false, 'SECURITY');