CyberRota Analysis
AI-GeneratedA vulnerability in the Upload Endpoint of zhistaredu StarTraining versions up to 3.8.1 allows for cross-site scripting (XSS) due to improper handling of file arguments in the MimeTypeUtils.java file. This weakness can be exploited remotely, posing a risk to users who interact with affected applications. Organizations utilizing this software should prioritize remediation to mitigate potential exploitation, especially if they handle sensitive user data.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipulation of the argument File causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.