Microsoft OneDrive for Android Path Traversal Vulnerability Allowing Privilege Escalation

A path traversal vulnerability has been identified in OneDrive for Android, allowing an authorized attacker to elevate privileges over a network. This issue arises from improper restriction of pathname access to certain directories.

Impact

Exploitation of this vulnerability could enable an attacker to gain unauthorized access to system resources, allowing actions to be performed with the same privileges as the compromised process. This could result in further system compromise and unauthorized activities within the network.

Remediation

Users can download the security update for OneDrive for Android from the Google Play Store.