Cybersecurity researchers have found a safety flaw in Microsoft’s OneDrive File Picker that, if efficiently exploited, may permit web sites to entry a consumer’s complete cloud storage content material, versus simply the recordsdata chosen for add by way of the software.
“This stems from overly broad OAuth scopes and deceptive consent screens that fail to obviously clarify the extent of entry being granted,
Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Entry — Even When Importing Simply One File
