Vulnerabilities > CVE-2020-5775 - Server-Side Request Forgery (SSRF) vulnerability in Instructure Canvas Learning Management Service 20200729

047910
CVSS 5.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
instructure
CWE-918

Summary

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.

Vulnerable Configurations

Part Description Count
Application
Instructure
1

Common Weakness Enumeration (CWE)