IN
Vendor
Instructure
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-36539 | CL Canvas Learning Management Service Instructure | 6.5 | Jan 26 | Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url) |
| CVE-2020-5775 | CL Canvas Learning Management Service Instructure | 5.8 | Aug 21 | Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains |