OneDrive Picker Flaw Exposes Cloud
- Overbroad OAuth scopes enable full drive access.
- Affects apps like Slack, ChatGPT, Trello, ClickUp.
- Uploading one file grants entire drive read access.
- Consent screens fail to explain true access level.
- Risk includes data leaks and compliance violations.