instructure/canvas-lms

Releases33K

Frequency3 hours 57 minutes

Last Release3 months ago

Stars6.72K

The open LMS by Instructure, Inc.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2021-36539NVD↗	—	Jan 26, 2023Thursday, 26 January 2023, 21:15	6.5 MEDIUM	—
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url).