Instructure Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for Instructure products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

0

Beyond CISA KEV

1

Sensor Observed

0

Virtual Patch Available

0

Instructure KEVs Added by Year

Loading...

1 Instructure KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2020-5775

Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET...

High Not in CISA 21 Aug 2020

Common Vulnerability Classes (CWE)

  • CWE-918 — Server-Side Request Forgery (SSRF) 1

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology