Improper permissions preservation in Nextcloud Server 16.0.1 causes sharees to be able to reshare with write permissions when sharing the mount point of a share they received, as a public link.
- https://hackerone.com/reports/619484
No PoCs found on GitHub currently.