Skip to content
Threat Feed

Tag

Cve-2025-71278

1 brief RSS
high advisory

XenForo OAuth2 Unauthorized Scope Request Vulnerability

XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes, potentially allowing client applications to gain access beyond their intended authorization level due to improper authorization checks.

cve-2025-71278 oauth2 xenforo incorrect-authorization
2r 1t 1c 2i