Vulnerability Details CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.593
EPSS Ranking 98.1%
CVSS Severity
CVSS v3 Score 5.8
CVSS v2 Score 5.0
References
Products affected by CVE-2020-5775
-
cpe:2.3:a:instructure:canvas_learning_management_service:2020-07-29