Deletion of an image removes a directory tree

[Marco-Jacobs]

Bug report

Steps to reproduce

1. create a directory structure like "/test1/? test2/test3/"
2. put an image in test3
3. switch to gallery view and navigate to the image
4. open the image and delete it

Expected behaviour

the image should be deleted

Actual behaviour

The directory test1 gets deleted.
It seems that the directory in wich the one with the question mark is gets deleted.
Maybe an SQL injection or similar?

Server configuration

Operating system: Ubuntu Server 18.04
Web server: Apache
Database: MySQL
PHP version: 7.3

Nextcloud configuration

Nextcloud version: 17.0.2
Updated from an older installation or fresh install: updated but happened in older versions too