Lucene search
+L
Node Saml ProjectNode Saml

1 matches found

CVE
CVE
added 2023/08/23 8:15 p.m.88 views

CVE-2023-40178

Node-SAML CVE-2023-40178 is a functional issue in validatePostRequestAsync that allows LogoutRequest XML to be reused beyond NotOnOrAfter due to missing current-timestamp checks. Root cause: absence of timestamp validity checks in the LogoutRequest validation flow (e.g., validatePostRequestAsync/...

5.3CVSS5AI score0.00491EPSS
Save