Yes, but typically not across tenants. Maybe the flaw is only exploitable to admins of each tenant and they shouldn’t see other tenants data.
I.e. https://news.ycombinator.com/item?id=24216009