How i Access The Deleted Files of Someone in Google Drive | Bug Bounty
1 min read
Summary
Google Drive allows users to permanently delete files, or send them to a trash folder, from which they can be restored or permanently deleted within 30 days.
However, a bug discovered by security researcher Ph Hitachi means that files in the trash are still accessible via direct download URLs, even though they are no longer visible or downloadable in the Google Drive UI, and no longer have preview available.
The researcher says that when they reported the bug to Google VRP, it was classified as a “working as intended” bug, due to the fact that “a file remains accessible until it is permanently deleted”, and that “if a file was shared before being trashed, its permissions remain unchanged”.
As a result, Google users are advised to manually remove public sharing before sending a file to the trash, or to permanently delete it immediately after it enters the trash.