2 matches found
CVE-2021-36539
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...
7.1CVSS0.00874EPSS
SaveExploits1References2
CVE-2021-36539: Authorization Bypass Through User-Controlled Key
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...
6.5CVSS5.8AI score0.00874EPSS
SaveExploits1References2
20