Autodesk · Report #2974307
Stored XSS via Post Tittle Enabling Non-Privileged User to Privileged User Exploitation on https://forums.autodesk.com/
Validstatus
highseverity
139upvotes
26 Feb 2025disclosed
Summary
A stored cross-site scripting (XSS) vulnerability was found on Autodesk Forums, which could have allowed an attacker to inject malicious JavaScript code when viewed by both non-privileged and privileged users. Autodesk has fixed the vulnerability and we thank @the-white-evil for reporting this issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.