zhistaredu vulnerabilities
7 published CVEs name zhistaredu among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-100881
zhistaredu StarTraining application.yml cross site scripting
zhistaredu · StarTraining
Low2.1 - CVE-2026-100880
zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting
zhistaredu · StarTraining
Medium5.1 - CVE-2026-100879
zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization
zhistaredu · StarTraining
Medium5.3 - CVE-2026-100878
zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization
zhistaredu · StarTraining
Medium5.3 - CVE-2026-97879
zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
zhistaredu · StarTraining
Medium6.9 - CVE-2026-97878
zhistaredu StarTraining Druid Console index.html anonymous missing authentication
zhistaredu · StarTraining
Medium6.9 - CVE-2026-97877
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
zhistaredu · StarTraining
Medium6.9