Critical Spring Authorization Server Flaw Enables XSS, Privilege Escalation, and SSRF