Search
Microsoft OneDrive Exposed to Critical Security Flaw: Excessive File Picker Permissions Risk Data Leaks
4 day ago /
Read about 0 minute
Author：小编
A critical security vulnerability has been discovered in Microsoft OneDrive's file picker, arising from excessively broad permission settings that lack the necessary granularity in OAuth permission controls. When users attempt to upload even a single file, the file picker demands read access to the entire cloud storage drive, accompanied by ambiguous authorization prompts, thereby elevating security risks. Furthermore, OAuth tokens are stored in plaintext within the browser, and certain authorization processes issue renewable refresh tokens, which could leave user data vulnerable for extended periods. Microsoft has acknowledged the existence of this vulnerability but has not yet deployed a solution to address it.
-
C114 Communication Network -
Communication Home
7 X 24 Track global technological trends
