Bypass lock protection in the Nextcloud Android app prior to version 3.6.2 causes leaking of thumbnails when requesting the Android content provider although the lock protection was not solved.
- https://hackerone.com/reports/534541
No PoCs found on GitHub currently.