Nextcloud disclosed a bug submitted by akshayravic09yc47: https://hackerone.com/reports/1977222 – Bounty: $150 [Source]