A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves.
- https://hackerone.com/reports/889243
No PoCs found on GitHub currently.