Nextcloud: files_lock: a write-share collaborator can place a TYPE_TOKEN lock that permanently denies the file owner, survives share revocation and account delet

A file-locking application on a cloud platform was found to contain a vulnerability in its permission-checking logic. A user with write-share permissions on another user's file could place an indefinite lock that permanently prevented the file owner and other collaborators from modifying the file...