Privilege Escalation

AlekSIS-Core is vulnerable to privilege escalation. Lack of disabling of the oauthrequest.client.allowedscopes field in aleksis/core/util/authhelpers.py: ClientProtectedResourceMixin allows an attacker to access the system with arbitrary scopes...