CVE-2025-23214 — Cosmos userbase checking vulnerability
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned i…
Published: 2025-01-20 · CVSS: 6.9 · CVSS 4.0
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7