StarTraining vulnerabilities

2 known vulnerabilities in StarTraining from Zhistaredu. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  StarTraining: Improper Authentication

  CVE-2026-97878Sep 25, 2026Zhistaredu

  A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be performed from remote.

• 7.3 High severity

  A vulnerability was determined in zhistaredu StarTraining up to 3.8.1.

  CVE-2026-97877Sep 25, 2026Zhistaredu

  A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id/company_id causes use