Forum Discussion

hennedy's avatar
hennedy
New member | Level 1
5 days ago

potential security vulnerability or a bug

Description: I noticed an issue where renaming an empty file in Dropbox results in the creation of a JSON metadata file. This JSON file seems to contain information related to the file preview, even though the file itself is empty.Steps to Reproduce: Create an empty file in Dropbox i chose to make a empty paper doc file Rename the file in the dropbox dashboard into .sql extension (i only tested in .xml and .json and sometimes they give different results like a binary file. observe I am a Software Developer and Tester and I like digging around, please don't think I was trying to hack,  I do this for fun and I report my findings, Always.  Thanks.

  • hennedy's avatar
    hennedy
    New member | Level 1

    forgive me for the format but formatting it was causing publishing issues

About Create, upload, and share

Find help to solve issues with creating, uploading, and sharing files and folders in Dropbox. Get support and advice from the Dropbox Community.

Need more support

If you need more help you can view your support options (expected response time for an email or ticket is 24 hours), or contact us on X or Facebook.

For more info on available support options for your Dropbox plan, see this article.

If you found the answer to your question in this Community thread, please 'like' the post to say thanks and to let us know it was useful!