Browse / Autodesk

Autodesk

See its reports on the map

What gets reported to Autodesk

• Cross-site Scripting4
• Information Disclosure4
• Insecure Direct Object Reference3
• Server-Side Request Forgery1
• Misconfiguration1
• Code Execution1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. SSRF in Autodesk Rendering leading to account takeoverServer-Side Request Forgery (SSRF) · critical
   161 votes
2. Stored XSS via Post Tittle Enabling Non-Privileged User to Privileged User Exploitation on https://forums.autodesk.com/Cross-site Scripting (XSS) - Stored · high
   139 votes
3. Stored Cross-Site Scripting found in custom integration app on https://admin.b360.autodesk.com.Cross-site Scripting (XSS) - Stored · medium
   127 votes
4. Reflected XSS Vulnerability in SVG File at area-resources-stg.autodesk.comCross-site Scripting (XSS) - Stored · medium
   93 votes
5. Twitter broken link hijacking in thewild.comOrigin Validation Error · low
   87 votes
6. Django Debug Mode Enabled - Information Disclosure on api.wwm-dev.autodesk.comInformation Exposure Through Debug Information · medium
   82 votes
7. Insecure Direct Object Reference (IDOR) in GraphQL deleteProfileImages MutationInsecure Direct Object Reference (IDOR) · high
   80 votes
8. HTML Injection in Business Name Parameter in PayappsCode Injection · medium
   75 votes
9. Stored XSS in AREA tutorialsCross-site Scripting (XSS) - Stored · high
   73 votes
10. Insecure Direct Object Reference (IDOR) Vulnerability in Autodesk User ProfileInsecure Direct Object Reference (IDOR) · medium
    73 votes
11. IDOR Vulnerability Allowing Unauthorized Profile Picture ChangeInsecure Direct Object Reference (IDOR) · medium
    69 votes
12. Exposing debug.log file leads to server full path disclosureInformation Disclosure · low
    56 votes
13. CVE-2023-5561 on Payapps.comInformation Disclosure · medium
    40 votes