Froxlor (2.3.8 <= Version < 2.3.15)

Froxlor versions 2.3.8 through 2.3.14 are vulnerable to an information disclosure in api_keys.php that allows an administrator with customers_see_all privileges to retrieve API keys and secrets via an unscoped database query.