Operating system and version:
Apache or nginx version:
A user that is logged in and accesses nextcloud via webdav can browse to the parent directory and see directories of other users and therefor their usernames. Perhaps I made mistake in my nginx configuration file?
Steps to replicate it:
- Install nextcloud
- Use nginx proxy and this config file https://pastebin.com/wNGWrHyh
- log in as a regular user in the webdav interface
- click on the parent button
- access any folder below
This is our nextcloud config file
Disabling the webdav interface would be an acceptable workaround for us for the time being.