| Package | Affected versions | Patched versions |
|---|---|---|
| canvas learning management service | = 2020-07-29 |
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free