Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/08/21 8:13 p.m.34 views

@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError

Summary The lack of checking of current timestamp allows a LogoutRequest XML to be reused multiple times even when the current time is past the NotOnOrAfter. Details It was noticed that in the validatePostRequestAsync flow in saml.js, the current timestamp is never checked. This could present a...

5.3CVSS6.3AI score0.00491EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder