CVE-2022-27873: XEE
An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document parser. The vulnerability exists in the application’s ‘Insert SVG’ procedure. An attacker can also leverage this vulnerability to obtain victim’s public IP and possibly other sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-27873.
What is the severity of CVE-2022-27873?
The severity of CVE-2022-27873 is high with a severity value of 7.8.
Which software is affected by CVE-2022-27873?
Autodesk Fusion 360 version up to and including 2.0.12887 is affected by CVE-2022-27873.
How can an attacker exploit CVE-2022-27873?
An attacker can exploit CVE-2022-27873 by forcing the victim's device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360's document parser.
Is there a fix for CVE-2022-27873?
The fix for CVE-2022-27873 is not mentioned in the provided information. Please refer to the reference link for more information.