Zzhistaredu

Products

Exploited and recent CVEs

• CVE-2026-100881 Low 2.6 zhistaredu StarTraining application.yml cross site scripting 0.2%
• CVE-2026-100880 Low 3.5 zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting 0.2%
• CVE-2026-100879 Medium 4.3 zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization 0.2%
• CVE-2026-100878 Medium 6.3 zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization 0.2%
• CVE-2026-97879 Medium 5.3 zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication 0.4%
• CVE-2026-97878 High 7.3 zhistaredu StarTraining Druid Console index.html anonymous missing authentication 0.4%
• CVE-2026-97877 High 7.3 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password 0.3%