Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. Cosmos-server is vulnerable due to to the authorization header used for user login remaining valid and not expiring after log out. This vulnerability allows an attacker to use the token to gain unauthorized access to the application/system even after the user has logged out. This issue has been patched in version 0.13.1.
{
"cwe_ids": [
"CWE-613"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/49xxx/CVE-2023-49091.json",
"cna_assigner": "GitHub_M"
}{
"cpe": [
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.1.15:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.1.16:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.1.17:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.3.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.4.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.6:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.7:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.8:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.9:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.5.12:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.6.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.6.4:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.6:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.7:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.8:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.9:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.7.10:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.6:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.7:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.8:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.9:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.10:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.8.11:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.6:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.7:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.8:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.9:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.10:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.11:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.12:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.13:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.14:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.15:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.16:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.17:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.18:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.19:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.20:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.9.21:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.10.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.10.1:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.10.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.10.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.10.4:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.11.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.11.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.11.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.11.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.0:-:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.1:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.2:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.3:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.4:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.5:*:*:*:*:*:*:*",
"cpe:2.3:a:cosmos-cloud:cosmos_server:0.12.6:-:*:*:*:*:*:*"
],
"source": [
"CPE_STRING",
"REFERENCES"
],
"extracted_events": [
{
"introduced": "0.1.15"
},
{
"last_affected": "0.1.15"
},
{
"introduced": "0.1.16"
},
{
"last_affected": "0.1.16"
},
{
"introduced": "0.1.17"
},
{
"last_affected": "0.1.17"
},
{
"introduced": "0.2.0"
},
{
"last_affected": "0.2.0"
},
{
"introduced": "0.3.0-NA"
},
{
"last_affected": "0.3.0-NA"
},
{
"introduced": "0.3.1"
},
{
"last_affected": "0.3.1"
},
{
"introduced": "0.3.2"
},
{
"last_affected": "0.3.2"
},
{
"introduced": "0.3.3"
},
{
"last_affected": "0.3.3"
},
{
"introduced": "0.3.4"
},
{
"last_affected": "0.3.4"
},
{
"introduced": "0.3.5"
},
{
"last_affected": "0.3.5"
},
{
"introduced": "0.4.0-NA"
},
{
"last_affected": "0.4.0-NA"
},
{
"introduced": "0.4.1"
},
{
"last_affected": "0.4.1"
},
{
"introduced": "0.4.2"
},
{
"last_affected": "0.4.2"
},
{
"introduced": "0.4.3"
},
{
"last_affected": "0.4.3"
},
{
"introduced": "0.5.0-NA"
},
{
"last_affected": "0.5.0-NA"
},
{
"introduced": "0.5.1"
},
{
"last_affected": "0.5.1"
},
{
"introduced": "0.5.2"
},
{
"last_affected": "0.5.2"
},
{
"introduced": "0.5.3"
},
{
"last_affected": "0.5.3"
},
{
"introduced": "0.5.4"
},
{
"last_affected": "0.5.4"
},
{
"introduced": "0.5.5"
},
{
"last_affected": "0.5.5"
},
{
"introduced": "0.5.6"
},
{
"last_affected": "0.5.6"
},
{
"introduced": "0.5.7-NA"
},
{
"last_affected": "0.5.7-NA"
},
{
"introduced": "0.5.8"
},
{
"last_affected": "0.5.8"
},
{
"introduced": "0.5.9"
},
{
"last_affected": "0.5.9"
},
{
"introduced": "0.5.12"
},
{
"last_affected": "0.5.12"
},
{
"introduced": "0.6.0-NA"
},
{
"last_affected": "0.6.0-NA"
},
{
"introduced": "0.6.1"
},
{
"last_affected": "0.6.1"
},
{
"introduced": "0.6.2"
},
{
"last_affected": "0.6.2"
},
{
"introduced": "0.6.3"
},
{
"last_affected": "0.6.3"
},
{
"introduced": "0.6.4-NA"
},
{
"last_affected": "0.6.4-NA"
},
{
"introduced": "0.7.0-NA"
},
{
"last_affected": "0.7.0-NA"
},
{
"introduced": "0.7.1"
},
{
"last_affected": "0.7.1"
},
{
"introduced": "0.7.2"
},
{
"last_affected": "0.7.2"
},
{
"introduced": "0.7.3"
},
{
"last_affected": "0.7.3"
},
{
"introduced": "0.7.4"
},
{
"last_affected": "0.7.4"
},
{
"introduced": "0.7.5"
},
{
"last_affected": "0.7.5"
},
{
"introduced": "0.7.6"
},
{
"last_affected": "0.7.6"
},
{
"introduced": "0.7.7"
},
{
"last_affected": "0.7.7"
},
{
"introduced": "0.7.8"
},
{
"last_affected": "0.7.8"
},
{
"introduced": "0.7.9"
},
{
"last_affected": "0.7.9"
},
{
"introduced": "0.7.10"
},
{
"last_affected": "0.7.10"
},
{
"introduced": "0.8.0-NA"
},
{
"last_affected": "0.8.0-NA"
},
{
"introduced": "0.8.1"
},
{
"last_affected": "0.8.1"
},
{
"introduced": "0.8.2"
},
{
"last_affected": "0.8.2"
},
{
"introduced": "0.8.3"
},
{
"last_affected": "0.8.3"
},
{
"introduced": "0.8.4"
},
{
"last_affected": "0.8.4"
},
{
"introduced": "0.8.5"
},
{
"last_affected": "0.8.5"
},
{
"introduced": "0.8.6"
},
{
"last_affected": "0.8.6"
},
{
"introduced": "0.8.7"
},
{
"last_affected": "0.8.7"
},
{
"introduced": "0.8.8"
},
{
"last_affected": "0.8.8"
},
{
"introduced": "0.8.9"
},
{
"last_affected": "0.8.9"
},
{
"introduced": "0.8.10"
},
{
"last_affected": "0.8.10"
},
{
"introduced": "0.8.11"
},
{
"last_affected": "0.8.11"
},
{
"introduced": "0.9.0-NA"
},
{
"last_affected": "0.9.0-NA"
},
{
"introduced": "0.9.1"
},
{
"last_affected": "0.9.1"
},
{
"introduced": "0.9.2"
},
{
"last_affected": "0.9.2"
},
{
"introduced": "0.9.3"
},
{
"last_affected": "0.9.3"
},
{
"introduced": "0.9.4"
},
{
"last_affected": "0.9.4"
},
{
"introduced": "0.9.5"
},
{
"last_affected": "0.9.5"
},
{
"introduced": "0.9.6"
},
{
"last_affected": "0.9.6"
},
{
"introduced": "0.9.7"
},
{
"last_affected": "0.9.7"
},
{
"introduced": "0.9.8"
},
{
"last_affected": "0.9.8"
},
{
"introduced": "0.9.9"
},
{
"last_affected": "0.9.9"
},
{
"introduced": "0.9.10"
},
{
"last_affected": "0.9.10"
},
{
"introduced": "0.9.11"
},
{
"last_affected": "0.9.11"
},
{
"introduced": "0.9.12"
},
{
"last_affected": "0.9.12"
},
{
"introduced": "0.9.13"
},
{
"last_affected": "0.9.13"
},
{
"introduced": "0.9.14"
},
{
"last_affected": "0.9.14"
},
{
"introduced": "0.9.15"
},
{
"last_affected": "0.9.15"
},
{
"introduced": "0.9.16"
},
{
"last_affected": "0.9.16"
},
{
"introduced": "0.9.17"
},
{
"last_affected": "0.9.17"
},
{
"introduced": "0.9.18"
},
{
"last_affected": "0.9.18"
},
{
"introduced": "0.9.19-NA"
},
{
"last_affected": "0.9.19-NA"
},
{
"introduced": "0.9.20"
},
{
"last_affected": "0.9.20"
},
{
"introduced": "0.9.21"
},
{
"last_affected": "0.9.21"
},
{
"introduced": "0.10.0-NA"
},
{
"last_affected": "0.10.0-NA"
},
{
"introduced": "0.10.1-NA"
},
{
"last_affected": "0.10.1-NA"
},
{
"introduced": "0.10.2"
},
{
"last_affected": "0.10.2"
},
{
"introduced": "0.10.3"
},
{
"last_affected": "0.10.3"
},
{
"introduced": "0.10.4-NA"
},
{
"last_affected": "0.10.4-NA"
},
{
"introduced": "0.11.0-NA"
},
{
"last_affected": "0.11.0-NA"
},
{
"introduced": "0.11.1"
},
{
"last_affected": "0.11.1"
},
{
"introduced": "0.11.2"
},
{
"last_affected": "0.11.2"
},
{
"introduced": "0.11.3"
},
{
"last_affected": "0.11.3"
},
{
"introduced": "0.12.0-NA"
},
{
"last_affected": "0.12.0-NA"
},
{
"introduced": "0.12.1"
},
{
"last_affected": "0.12.1"
},
{
"introduced": "0.12.2"
},
{
"last_affected": "0.12.2"
},
{
"introduced": "0.12.3"
},
{
"last_affected": "0.12.3"
},
{
"introduced": "0.12.4"
},
{
"last_affected": "0.12.4"
},
{
"introduced": "0.12.5"
},
{
"last_affected": "0.12.5"
},
{
"introduced": "0.12.6-NA"
},
{
"last_affected": "0.12.6-NA"
}
]
}