Login Request a demo
CL
Product
Canvas Learning Management Service
by Instructure · last CVE Jan 26, 2023
2
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Canvas Learning Management Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-36539
6.5
1%
Jan 26
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url)
Affected: before 2022-10-15
CVE-2020-5775
5.8
7%
Aug 21
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains
Affected: 2020-07-29
Showing 2