PT-2023-12286 · Instructure · Instructure Canvas Lms

Name of the Vulnerable Software and Affected Versions: Instructure Canvas LMS affected versions not specified Description: The issue concerns improper access control in Instructure Canvas LMS, where unprivileged users can access locked or unpublished files through the DocViewer based file preview...