Nextcloud disclosed on HackerOne: Sensitive files/ data exists ...
Advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-xcj9-3jch-qr2r
hackerone.com