CVE-2025-10244: HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability
A maliciously crafted HTML payload, when rendered by the Autodesk Fusion desktop application, can trigger a Stored Cross-site Scripting (XSS) vulnerability. A malicious actor may leverage this vulnerability to read local files or execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10244?
CVE-2025-10244 poses a high severity risk due to its potential to allow execution of arbitrary code.
How do I fix CVE-2025-10244?
To mitigate CVE-2025-10244, ensure you update Autodesk Fusion to the latest version provided by Autodesk.
What systems are affected by CVE-2025-10244?
CVE-2025-10244 affects the Autodesk Fusion desktop application across various platforms.
What type of vulnerability is CVE-2025-10244?
CVE-2025-10244 is classified as a Stored Cross-site Scripting (XSS) vulnerability.
Can CVE-2025-10244 allow external access to my files?
Yes, CVE-2025-10244 can enable a malicious actor to read local files on the affected system.