Is it possible for an attacker to see all files inside of /uploads?

Questions and Answers
4

Thanks @stevewlrls!
And also Thanks @dallasclark!

So if I access /uploads locally without an additional reverse-proxy i will not receive a list of files.
→ {"data":null,"error":{"status":404,"name":"NotFoundError","message":"Not Found","details":{}}}

However your answer indicates to me that you can actually get - somehow? - a list of all files in /uploads without me adding an additional reverse-proxy?