Back to Database
Status published
Medium
CVE-2025-23214
Cosmos userbase checking vulnerability
Vulnerability Description
Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-23214
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
azukaar
View all reports →Affected Software
Cosmos-Server
Vulnerable Versions:
< 0.17.7
Timeline
Official Publish:
January 20th, 2025
Last Modified:
February 12th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.