[Canvas] CANVAS 7.32 released

canvas at immunityinc.com canvas at immunityinc.com
Thu Jan 27 14:56:11 UTC 2022


*Date*: 26 January 2022

*Version*: 7.32

*Download URL*: https://canvas.immunityinc.com/getcanvas

*Release Notes*:

In this CANVAS release we are bringing you 5 new modules and bugfixes.

Our new modules include the log4j exploit (CVE-2021-44228), two VMware
vCenter exploits (CVE-2021-22005, CVE-2021-21985), an exploit for Grafana
(CVE-2021-43798) and one for Oracle WebLogic (CVE-2020-14882).


==Changes==

o spkproxy - ability to specify HTTP version in urlopen()

==New Modules==

o grafana_lfi (CVE-2021-43798)

o log4j_rce (CVE-2021-44228)

o vmware_vcenter_health_rce (CVE-2021-21985)

o vcenter_file_upload (CVE-2021-22005)

o weblogic_el_injection (CVE-2020-14882)


More information about the Canvas mailing list