Vendor

    Zhistaredu

    7 known vulnerabilities in products by Zhistaredu, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Zhistaredu
    HighCVE-2026-97878

    zhistaredu StarTraining Druid Console index.html anonymous missing authentication

    		7.3
    MediumCVE-2026-97879

    zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication

    		5.3
    HighCVE-2026-97877

    zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password

    		7.3
    MediumCVE-2026-100878

    zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization

    		6.3
    MediumCVE-2026-100879

    zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

    		4.3
    MediumCVE-2026-100880

    zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting

    		3.5
    LowCVE-2026-100881

    zhistaredu StarTraining application.yml cross site scripting

    		2.6

    Products

    Products by Zhistaredu
    StarTraining70