A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about t [truncated]
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1, impacting the function anonymous of the file /druid/index.html of the component Druid Console, leading to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. Defenders should assess exposure and prioritize verification of inventory and compensating controls. This vulnera [truncated]
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id/company_id causes use of hard-coded password. The attack is possible to be carried out remotely. Defenders should assess exposure and prioritize remediation, focusing on [truncated]
