Description
A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Autodesk | Fusion | 2703.1.11 – < 2703.1.20 | 2703.1.20 |