diff --git a/apps/dav/lib/DAV/CustomPropertiesBackend.php b/apps/dav/lib/DAV/CustomPropertiesBackend.php
index b74a9d4d6089d..920a06365d56f 100644
--- a/apps/dav/lib/DAV/CustomPropertiesBackend.php
+++ b/apps/dav/lib/DAV/CustomPropertiesBackend.php
@@ -234,7 +234,7 @@ private function getPublishedProperties(string $path, array $requestedProperties
 		}
 
 		$qb = $this->connection->getQueryBuilder();
-		$qb->select('*')
+		$qb->select('id', 'userid', 'propertypath', 'propertyname', 'propertyvalue')
 			->from(self::TABLE_NAME)
 			->where($qb->expr()->eq('propertypath', $qb->createNamedParameter($path)));
 		$result = $qb->executeQuery();
@@ -263,7 +263,7 @@ private function getUserProperties(string $path, array $requestedProperties) {
 		}
 
 		// TODO: chunking if more than 1000 properties
-		$sql = 'SELECT * FROM `*PREFIX*properties` WHERE `userid` = ? AND `propertypath` = ?';
+		$sql = 'SELECT id, userid, propertypath, propertyname, propertyvalue FROM `*PREFIX*properties` WHERE `userid` = ? AND `propertypath` = ?';
 
 		$whereValues = [$this->user->getUID(), $this->formatPath($path)];
 		$whereTypes = [null, null];