Zhistaredu / StarTraining
7 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-100881 | zhistaredu StarTraining application.yml cross site scripting | LOW | 2.1 | Sep 27, 2026 |
| CVE-2026-100880 | zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting | MEDIUM | 5.1 | Sep 27, 2026 |
| CVE-2026-100879 | zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization | MEDIUM | 5.3 | Sep 27, 2026 |
| CVE-2026-100878 | zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization | MEDIUM | 5.3 | Sep 27, 2026 |
| CVE-2026-97879 | zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication | MEDIUM | 6.9 | Sep 25, 2026 |
| CVE-2026-97878 | zhistaredu StarTraining Druid Console index.html anonymous missing authentication | MEDIUM | 6.9 | Sep 25, 2026 |
| CVE-2026-97877 | zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password | MEDIUM | 6.9 | Sep 25, 2026 |
Showing 1 to 7 of 7 CVEs