Describe CVE-2021-36539.
What is CVE-2021-36539?
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL (canvadoc_session_url)..