Lucene search
+L

1 matches found

OSV
OSV
added 2023/08/21 8:13 p.m.63 views

GHSA-VX8M-6FHW-PCCW @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError

Summary The lack of checking of current timestamp allows a LogoutRequest XML to be reused multiple times even when the current time is past the NotOnOrAfter. Details It was noticed that in the validatePostRequestAsync flow in saml.js, the current timestamp is never checked. This could present a...

5.3CVSS5AI score0.00491EPSS
SaveExploits0References5
Rows per page
Query Builder