OneDrive flaw can give websites and apps full access to your files, even if you pick just one

stapp · Jun 3, 2025 at 12:22 AM

Microsoft OneDrive is used by millions of users, largely thanks to its integration as the default cloud file hosting service on Windows and Microsoft 365.
Security researchers at Oasis Security discovered a flaw in OneDrive that could give services, apps, and websites full access to all hosted files.
Click to expand...

Many users who upload files directly from OneDrive to such a service might expect that it only gains permissions to access the selected file or files.
Oasis Security notes that this is not the case, as OneDrive does not support fine-grained access controls. In other words, it is a all or nothing option that, at least in theory, gives the service full access to all files.
Click to expand...

https://www.ghacks.net/2025/06/02/o...cess-to-your-files-even-if-you-pick-just-one/

Log in or Sign up

OneDrive flaw can give websites and apps full access to your files, even if you pick just one

stapp Global Moderator

Log in or Sign up

OneDrive flaw can give websites and apps full access to your files, even if you pick just one

stapp Global Moderator

Useful Searches