SAP warns of maximum severity OAuth2 SSRF security flaw

Nyxfrom the oauth-confusion-strikes-again dept.

SAP patched a critical OAuth2 server-side request forgery flaw in its Cloud SDK for Python, along with 19 other vulnerabilities across its product line in October. The SSRF bug could let an attacker bypass authentication and access internal resources. Organizations running SAP cloud applications should prioritize this update.

Read the original on www-bleepingcomputer-com.cdn.ampproject.org