Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...
6.5CVSS6.9AI score0.00866EPSS
SaveExploits1References1
Cvelist•added 2023/01/26 12:0 a.m.•39 views
CVE-2021-36539
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...
