Vendor
azukaar
4 known vulnerabilities.
Products
3 results · Clear filters · Feed
-
Medium 6.1
Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Prior to 0.22.19, tokenMiddleware in src/proxy/routerGen.go can return through the Constellation tunnel bypass before rem…
-
Medium 5.3
Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. In 0.22.18, `GET /cosmos/api/constellation/public-devices` discloses Constellation device metadata to a requester that su…
-
Medium 6.9
Cosmos userbase checking vulnerability
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the datab…