Vulnerability in Azukaar Cosmos-Server
CVE-2025-23214
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.
EPSS: 0.006 (48.3th percentile) — read the EPSS interpretation.
Affected products
- Azukaar Cosmos-server — versions < 0.17.7
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)