Nextcloud: Shared smart albums in the Photos app can expose files outside the album owner's configured source folders

A vulnerability was discovered in a file manager component of a file sharing application. The vulnerability allowed an attacker to access files outside of the intended shared folder by configuring more permissive search paths than the victim intended. This resulted in unauthorized information...