Beveiligingsadvies

CVE-2025-71278

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-01 00:30:08

Laatst bijgewerkt 2026-04-01 15:52:08

Toegewezen door VulnCheck

CVSS-score 8.8

Status PUBLISHED

Beschrijving

XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes. This affects any customer using OAuth2 clients on any version of XenForo 2.3 prior to 2.3.5, potentially allowing client applications to gain access beyond their intended authorization level.

← Alle CVE's bekijken Bekijk op cve.org ↗