Skip to content
OpenAdvisories
Medium · 6.9 CVE-2025-23214 EUVD-2025-3146

Cosmos userbase checking vulnerability

Published Jan 20, 2025 · Updated Feb 12, 2025 · Assigned by GitHub_M

Description

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.

Affected products

VendorProductAffectedFixed
azukaar Cosmos-Server < 0.17.7 —

References