Skip to content
OpenAdvisories

Vendor

zhistaredu

7 known vulnerabilities.

Products

StarTraining 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-100879

    zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

    A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may b…

    zhistaredu StarTraining
  • Medium 6.3
    CVE-2026-100878

    zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization

    A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. The manipulat…

    zhistaredu StarTraining
  • Medium 5.3
    CVE-2026-97879

    zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication

    A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs Endpoint. Performing a manipulation results in missing authentication. It is poss…

    zhistaredu StarTraining