Node Saml ProjectNode Saml
1 matches found
CVE-2023-40178
Node-SAML CVE-2023-40178 is a functional issue in validatePostRequestAsync that allows LogoutRequest XML to be reused beyond NotOnOrAfter due to missing current-timestamp checks. Root cause: absence of timestamp validity checks in the LogoutRequest validation flow (e.g., validatePostRequestAsync/...
5.3CVSS5AI score0.00491EPSS
Save