CVE-2026-100878
MediumCVSS 6.3Summary
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1 affecting the SysUser.isAdmin function in edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the authRole Endpoint component. Manipulation of the userId/roleIds arguments leads to authorization bypass and can be carried out remotely.
Risk Assessment
Authorization bypass may allow an attacker to escalate privileges and gain administrative access, posing a serious threat to the entire system.
Recommendation
Contact the vendor for a patch, as they did not respond to the disclosure. Until a fix is available, restrict access to the authRole Endpoint component and verify user privileges.
Other vulnerabilities in StarTraining
See all- CVE-2026-100881Low
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed publicly and may be used. Not independently exploitable: a defense-in-depth absence that amplifies CVE-2026-100880. The vendor was contacted early about this disclosure but did not respond in any way.
- CVE-2026-100879Medium
A security flaw was discovered in zhistaredu StarTraining up to 3.8.1 affecting the checkRoleAllowed function in SysRoleServiceImpl.java of the dataScope Endpoint component. The manipulation results in missing authorization and can be performed remotely.
- CVE-2026-97879Medium
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Original NVD description (English source)
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. The manipulation of the argument userId/roleIds leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS