← voltar
CVE-2025-23214

Cosmos userbase checking vulnerability

CVSS 6.9 MEDIUMEPSS 0.6%CWE-204
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
azukaar · Cosmos-Server

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →