Security researchers SecurityBridge, who notified SAP after finding the flaw, described as a “missing input sanitation” ...