Autodesk Fusion Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Autodesk Fusion desktop application, version 2602.1.25. This vulnerability allows a maliciously crafted HTML payload, when rendered by the application, to execute arbitrary code or read local files in the context of the current process.

Impact

Exploitation of this vulnerability can lead to stored cross-site scripting, allowing for the execution of malicious scripts in the user's context.

Remediation

Users are advised to update to Autodesk Fusion version 2604.1.25. The update is available through the Autodesk Fusion Client Downloader for Windows or Mac.