Nextcloud OfficeOnline Information Disclosure Vulnerability

Nextcloud is an open source, self-hosted file synchronization and sharing communications application platform from Nextcloud Germany. nextcloud OfficeOnline applications prior to version 1.1.1 are vulnerable to an information disclosure vulnerability in which the vulnerable application returns verbatim exception messages to the user. An attacker could exploit this vulnerability to cause a full path leak of shared files.