Nextcloud disclosed on HackerOne: Access to arbitrary file of the...

Security advisory at https://github.com/nextcloud/security-advisories/security/advisories/GHSA-vw2w-gpcv-v39f