CVE-2023-40178

CVE-2023-40178 is a medium-severity vulnerability affecting Node-SAML, a Node.js SAML library. It stems from a lack of timestamp validation, allowing LogoutRequest XML to be replayed even after its NotOnOrAfter expiration. This could lead to users being logged out by expired requests, potentially impacting many users if LogoutRequests are broadly distributed. The vulnerability has a CVSS score of 5.3 (medium) and is easily exploitable with low attack complexity, resulting in a denial of service (availability impact). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.