diff --git a/apps/files_versions/ajax/getVersions.php b/apps/files_versions/ajax/getVersions.php
index 1953a55d13d812dc4a7e5549f68b65d45b3684f7..7d704c14618505cc6a0e9072da636b6723904e1b 100644
--- a/apps/files_versions/ajax/getVersions.php
+++ b/apps/files_versions/ajax/getVersions.php
@@ -41,6 +41,11 @@ if( $versions ) {
 
 	$versions = array_slice($versions, $start, $count);
 
+	// remove owner path from request to not disclose it to the recipient
+	foreach ($versions as $version) {
+		unset($version['path']);
+	}
+
 	\OCP\JSON::success(array('data' => array('versions' => $versions, 'endReached' => $endReached)));
 
 } else {
diff --git a/apps/files_versions/js/versioncollection.js b/apps/files_versions/js/versioncollection.js
index 176f8e7529c44bedc236f3ffcfd3c891feddfd8f..fdb12bae0a958941b84ae5033cfda8e056a40af5 100644
Binary files a/apps/files_versions/js/versioncollection.js and b/apps/files_versions/js/versioncollection.js differ