zhistaredu vulnerabilities

7 published CVEs name zhistaredu among the affected products.

Critical 0High 0Medium 6Low 1Not scored 0

Newest CVEs

CVE-2026-100881
zhistaredu StarTraining application.yml cross site scripting
zhistaredu · StarTraining
Low2.1
CVE-2026-100880
zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting
zhistaredu · StarTraining
Medium5.1
CVE-2026-100879
zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization
zhistaredu · StarTraining
Medium5.3
CVE-2026-100878
zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization
zhistaredu · StarTraining
Medium5.3
CVE-2026-97879
zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
zhistaredu · StarTraining
Medium6.9
CVE-2026-97878
zhistaredu StarTraining Druid Console index.html anonymous missing authentication
zhistaredu · StarTraining
Medium6.9
CVE-2026-97877
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
zhistaredu · StarTraining
Medium6.9