SAP warns of maximum-severity OAuth2 SSRF security flaw · Digg