Design/Logic Flaw

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

instructure canvas lms

logic flaw

unprivileged access

locked files

security vulnerability

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

JSON

Instructure Canvas LMS didn’t properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url).

CPENameOperatorVersion
canvas_learning_management_serviceeq< 20221015

CPE	Name	Operator	Version
	canvas_learning_management_service	eq	< 20221015

References

github.com/gaukas/instructure-canvas-file-oracle

github.com/instructure/canvas-lms/issues/1905