What’s Vulnerable › Products

zhistaredu StarTraining vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your zhistaredu StarTraining version is affected

Latest zhistaredu StarTraining vulnerabilities

• CVE-2026-100881 — zhistaredu StarTraining application.yml cross site scripting (CVSS 2.6)
• CVE-2026-100880 — zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting (CVSS 3.5)
• CVE-2026-100879 — zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization (CVSS 4.3)
• CVE-2026-100878 — zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization (CVSS 6.3)
• CVE-2026-97879 — zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication (CVSS 5.3)
• CVE-2026-97878 — zhistaredu StarTraining Druid Console index.html anonymous missing authentication (CVSS 7.3)
• CVE-2026-97877 — zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password (CVSS 7.3)