Plane version 0.7.1 allows an unauthenticated malicious user to view all stored server files of all users.
plane plane 0.7.1