CVE-2021-36539

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL…

published January 26, 2023

CVSS
—
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00874 · 58.5th percentile
Published
2023-01-26T00:00Z
EPSS history
Timeline
  • 26 JAN 00:00Z
    Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL…
    cvelistv5