oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers
A vulnerability was discovered in oauthlib, a Python library for implementing OAuth authorization flows. The flaw allows a remote attacker with lower privileges to exploit client identity confusion in token grant handlers, enabling them to obtain access tokens with unauthorized permissions and scopes associated with another client. This privilege escalation vulnerability affects systems using oauthlib for OAuth authorization, specifically in scenarios where client identity is not properly validated.
Save an API key to vote.