medium5.8
CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to …
Impact
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Instructure | Canvas Learning Management Service | Version 2020-07-29 |