standardnotes / forum

Support from other community members. For 1-on-1 help, please contact help@standardnotes.com.
https://forum.standardnotes.org
196 stars 9 forks source link

Anyone can access files attached to a protected note without entering a passcode #1718

Closed avt00 closed 1 year ago

avt00 commented 2 years ago

I am currently subscribed to a paid plan on StandardNotes, which includes file storage integrated into the application. As far as I know, any information stored within a protected note should be inaccessible if the appropriate protections are enabled.

However, in the current version of the application, it appears that files attached to protected notes can be accessed by anyone through the Files -> All Files dropdown menu. This presents a significant security vulnerability that needs to be addressed.

myreli commented 1 year ago

Duplicate: https://github.com/standardnotes/forum/discussions/2849