instructure/canvas-lms

Releases33K

Frequency4 hours

Last Release about 1 month ago

Stars6.67K

The open LMS by Instructure, Inc.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-36539 ↗	Jan 26, 2023Thursday, 26 January 2023, 21:15	6.5 MEDIUM	—
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url).