oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers

A flaw was found in oauthlib. In certain token grant flows, the authorization system can authenticate an incoming client while retaining a different, client-supplied identifier for permission and scope validation. A remote, authenticated attacker with lower privileges can exploit this inconsisten...