search

DisboxApp / web

Use Discord as a file storage service.
https://disboxapp.github.io/web/
GNU Affero General Public License v3.0
470 stars 87 forks source link

XWormClient.exe #83

Closed 3geETR closed 9 months ago

3geETR commented 9 months ago

If we write this in the webhook url (https:&) a file named XWormClient.exe appears. We can open a new folder here and we cannot delete it, we cannot change its name and the folder we opened is visible to everyone. image image It could be a virus, I don't know

DisboxApp commented 9 months ago

It appears that by default if Disbox doesn't find the webhook URL, it still lets you upload metadata - even though there's no actual files.

Thank you for reporting this! Just want to clarify this is purely a metadata bug and no virus was actually uploaded.

For now, I've deleted the metadata.