Threats tagged 'ghsa-gp9c-wgqc-wwg3'

OpenAM versions prior to 16.1.4 have an incomplete output encoding vulnerability related to SAML 1.x identity providers. This flaw allows a trusted identity provider to inject unencoded content into the service provider's auto-submitted form, potentially altering attribute values. The vulnerability undermines the integrity of attributes received by the target application. The CVSS score is low, reflecting limited impact on confidentiality and availability, with some integrity impact. No patch links or fixed versions are explicitly provided in the data.