An incomplete output encoding issue exists that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers who control a trusted identity provider can craft assertion attribute names or values that reach the target application in a modified form, which undermines the integrity of the received attributes.