Autodesk Fusion Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Autodesk Fusion desktop application. This issue arises when a maliciously crafted HTML payload is embedded in a part's attribute and clicked by a user. Exploitation of this vulnerability could allow a malicious actor to read local files or execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to stored cross-site scripting, allowing for the execution of malicious scripts in the user's context.

Remediation

Users are advised to update to version 2606.1.22 or later. The latest version can be downloaded from the Autodesk Fusion Client Downloader available for Windows and Mac.