check how this security hole came to be
root@nextcloud:/# ls -la /config/etc/nextcloud/
total 76
drwxr-xr-x. 2 www-data www-data 4096 May 6 16:18 .
drwxr-xr-x. 5 root root 4096 May 6 15:57 ..
-rw-r--r--. 1 www-data www-data 495 May 6 15:07 .htaccess
-rw-r--r--. 1 www-data www-data 0 May 6 15:07 CAN_INSTALL
-rw-rw-rw-. 1 root root 907 May 6 16:18 config.php
-rw-r--r--. 1 www-data www-data 54843 May 6 15:08 config.sample.php
-rw-r--r--. 1 root root 1658 May 6 16:01 config_tmpl.php
root@nextcloud:/# uname -a
Edited by Hans Freitag