MICROSOFT ONEDRIVE FILE PICKER FLAW GRANTS APPS FULL CLOUD ACCESS — EVEN WHEN UPLOADING JUST ONE FILE

Summary from the TLDR InfoSec newsletter

Cybersecurity researchers discovered a flaw in Microsoft's OneDrive File Picker that could allow websites to access users' entire cloud storage instead of just selected files. The issue affects apps like ChatGPT, Slack, and Trello due to overly broad OAuth permissions and vague consent screens. Microsoft acknowledged the problem but hasn't provided a fix yet.