MEDIUM 6.5 Published on 2025-11-11

CVE-2025-60722

Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.

CVSS v3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected mobile apps

Microsoft OneDrive

com.microsoft.skydrive

1 open

Vulnerable CPE configurations

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	onedrive	Android	<7.42	cpe:2.3:a:microsoft:onedrive::::::android::*

View on NVD ↗