Skip to content
Sign in
Not rated

CVE-2020-5775 Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas…

Description

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.

Affected products and versions

Product Affected versions Fixed in
Instructure Canvas Learning Management System (LMS) Versions not published
Track this CVE