Lucene search
+L

3 matches found

CVE
CVE
•added 2026/09/27 8:45 p.m.•7 views

CVE-2026-100879

A security flaw exists in zhistaredu StarTraining up to version 3.8.1 . The vulnerability is located in the checkRoleAllowed function within the SysRoleServiceImpl.java file of the dataScope Endpoint component. This flaw leads to missing authorization , which may be triggered via a remote attack ...

5.3CVSS4.8AI score0.00198EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/27 8:45 p.m.•20 views

CVE-2026-100879 zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

5.3CVSS0.00198EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/27 8:45 p.m.•8 views

EUVD-2026-88034

A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit h...

5.3CVSS4.8AI score0.00198EPSS
SaveExploits0References5
Rows per page
Query Builder