Nextcloud disclosed a bug submitted by cyber_world_01: https://hackerone.com/reports/2052795 [Source]