Autodesk · Report #3045455
Reflected XSS Vulnerability in SVG File at area-resources-stg.autodesk.com
Validstatus
mediumseverity
93upvotes
17 Apr 2025disclosed
Summary
A reflected cross-site scripting (XSS) vulnerability was found on files stored on an Autodesk AREA server, which could have allowed an attacker to inject malicious JavaScript code when viewed by users. Autodesk has fixed the vulnerability and we thank @ahmednasr1 for reporting this issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.