Skip to content
OpenAdvisories

Vendor

Shuffle

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.6

    Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation

    Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGeneration endpoint that allows administrators to reset and read API keys of non-administrator users in other organizations. Attackers with admin privileges in on…