Oasis Security Finds Microsoft OneDrive File Picker Flaw Giving Hundreds of Apps Full Cloud Access; Microsoft Notified

Research by cybersecurity firm Oasis Security has revealed a vulnerability in Microsoft's OneDrive File Picker that allows hundreds of web applications to gain full access to a user's entire OneDrive cloud storage, rather than just the single file selected for upload. This flaw exposes users' complete cloud drives to potentially unauthorized access by third-party apps. The issue was highlighted by several cybersecurity news outlets including The Hacker News, DarkReading, and SC Magazine. Microsoft has been notified of the vulnerability. The discovery underscores ongoing challenges in cloud security and application permissions management.