Cpe:2.3:a:froxlor:froxlor:2.3.8:*:*:*:*:*:*:*

Froxlor versions 2.3.8 through 2.3.14 are vulnerable to an information disclosure in api_keys.php that allows an administrator with customers_see_all privileges to retrieve API keys and secrets via an unscoped database query.