You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
Security Concern Want To Talk In Private.
Hello , My name is Mujtaba and i am a researcher in bugcrowd as galacticocean . i want to talk in private about a critical vulnerability that i have found in dropbox . you can give me an email addres...
Hey GalacticOcean, sorry for jumping in.
To report a bug/potential vulnerability to the relevant department directly, I’d suggest doing so via Bugcrown, as mentioned here.
Thanks!
I have found files in a dropbox subdomain website . which can contain sensitive info like email address , password of accounts and etc which are acquired by dropbox from the customers. These files are blank because some these files are written in server side language and some are configured in a way that a user can not see it . There is no barrier between the files and the user . user can access these files anytime without login . if you want to know the files name . ask me .
Nancy
Dropbox Staff
Dropbox StaffHey GalacticOcean, sorry for jumping in.
To report a bug/potential vulnerability to the relevant department directly, I’d suggest doing so via Bugcrown, as mentioned here.
Thanks!
