Insecure Direct Object Reference (IDOR) Vulnerability in Autodesk User Profile

Summary

An IDOR (Insecure Direct Object Reference) vulnerability was found on Autodesk User Profile, through the "id" parameter which could have allowed an attacker to edit another user's profile. We thank @eyax0 for reporting this issue.

This report highlights an IDOR vulnerability in Autodesk User Profile, allowing unauthorized modifications to other users' profile information via the id parameter in an API request. The issue was initially marked as a duplicate but later validated, triaged, and resolved.