Zhistaredu vulnerabilities
We track 2 vulnerabilities in Zhistaredu products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Zhistaredu vulnerabilities
- 7.3 High severity
StarTraining: Improper Authentication
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be performed from remote.
- 7.3 High severity
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1.
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id/company_id causes use