Description
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Instructure Canvas Learning Management System (LMS) | Canvas LMS 2020-07-29 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery http/cves/2020/CVE-2020-5775.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.