Skip to content
OpenAdvisories

Vendor

azukaar

4 known vulnerabilities.

Products

Cosmos-Server 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-49091

    Jwttoken in Cosmos server never expires after password changed and logging out

    Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Cosmos-server is vulnerable due to to the authorization header used for user login remaining valid and not expiring after…

    azukaar Cosmos-Server