Advisories · Technology
zhistaredu StarTraining.
Every CVE that names zhistaredu StarTraining among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.1 Low
zhistaredu StarTraining application.yml cross site scripting
- zhistaredu StarTraining
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
zhistaredu StarTraining Upload Endpoint MimeTypeUtils.java cross site scripting
- zhistaredu StarTraining
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.3 Medium
zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization
- zhistaredu StarTraining
- Broken access control
- CVSS 5.3 Medium
zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization
- zhistaredu StarTraining
- Broken access control
- CVSS 6.9 Medium
zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
- zhistaredu StarTraining
- Authentication bypass
- CVSS 6.9 Medium
zhistaredu StarTraining Druid Console index.html anonymous missing authentication
- zhistaredu StarTraining
- Authentication bypass
- CVSS 6.9 Medium
zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
- zhistaredu StarTraining
- Hard-coded credentials
- CWE-255