Skip to content
OpenAdvisories

Vendor

juice-shop

1 known vulnerabilities.

Products

multi-juicer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-48518

    MultiJuicer: Login CSRF allows attacker to force victims into their team

    MultiJuicer is used to run separate Juice Shop instances on a central kubernetes cluster without the need for local instances. In versions 8.0.0 through 10.0.0, the team join endpoint (POST /multi-juicer/api/teams/{team}/join) accepted requests with any Conte…

    juice-shop multi-juicer