tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'ent-13716-vulnerabilidad-netflow' into 'develop' 

Ent 13716 Vulnerabilidad netflow

See merge request artica/pandorafms!7370
This commit is contained in:
Diego Muñoz-Reja 2024-05-16 08:10:11 +00:00
parent f3d6164545 b56cdc743e
commit 6bb9fe1be6
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pandora_console/include/functions_netflow.php
View File

@ -804,8 +804,9 @@ function netflow_get_stats(
return json_decode($data, true);
}
$aggregate = escapeshellarg($aggregate.'/bytes');
// Get the command to call nfdump.
$options = "-o csv -q -n $max -s $aggregate/bytes -t ".date($nfdump_date_format, $start_date).'-'.date($nfdump_date_format, $end_date);
$options = "-o csv -q -n $max -s $aggregate -t ".date($nfdump_date_format, $start_date).'-'.date($nfdump_date_format, $end_date);
$command = netflow_get_command($options, $filter, $start_date_fixed, $end_date_fixed);
// Execute nfdump.
exec($command, $string);
@ -1147,6 +1148,7 @@ function netflow_get_command($options, $filter, $date_init=0, $date_end=0)
// Filter options.
$command .= ' '.netflow_get_filter_arguments($filter);
return $command;
}
@ -2186,9 +2188,9 @@ function netflow_get_top_data(
// Get the command to call nfdump.
$options = sprintf(
'-q -o csv -n %s -s %s/bytes -t %s-%s',
'-q -o csv -n %s -s %s -t %s-%s',
$max,
$aggregate,
escapeshellarg($aggregate.'/bytes'),
date($nfdump_date_format, $start_date),
date($nfdump_date_format, $end_date)
);