Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2021-36539
Disclosure Date: January 26, 2023 (last updated October 08, 2023)
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url).
0
Attacker Value
Unknown
CVE-2021-25007
Disclosure Date: March 14, 2022 (last updated February 23, 2025)
The MOLIE WordPress plugin through 0.5 does not validate and escape a post parameter before using in a SQL statement, leading to an SQL Injection
0
Attacker Value
Unknown
CVE-2021-25006
Disclosure Date: March 14, 2022 (last updated February 23, 2025)
The MOLIE WordPress plugin through 0.5 does not escape the course_id parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
0
Attacker Value
Unknown
CVE-2020-5775 — Server-Side Request Forgery in Canvas LMS
Disclosure Date: August 21, 2020 (last updated February 22, 2025)
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
0
