CVE-2022-27873

2022-07-2915:17:03

autodesk

www.cve.org

autodesk fusion 360

svg file

http requests

wan

vulnerability

document parser

public ip

sensitive information

EPSS

0.001

Percentile

26.4%

JSON

An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document parser. The vulnerability exists in the application’s ‘Insert SVG’ procedure. An attacker can also leverage this vulnerability to obtain victim’s public IP and possibly other sensitive information.

CNA Affected

[
  {
    "product": "Fusion360",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.12887 and prior"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0013

EPSS

0.001

Percentile

26.4%

JSON

Related for CVELIST:CVE-2022-27873