The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoResearchPeer-reviewed
Beyond the Scope: Security Testing of Permission Management in Team Workspaces
- Published
- Record updated
Summary
Researchers examined how team workspaces such as Google Workspace and Microsoft OneDrive handle permissions for third-party add-ons, which can operate across shared resources. They identified three risks that can be exploited for permission escalation and built a tool named TAI to automatically test permission-related interactions. Testing found 41 problematic interactions, indicating that permission escalation vulnerabilities are widespread in this ecosystem.