Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.
- https://hackerone.com/reports/921717
No PoCs found on GitHub currently.