CVE-2025-23214

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-23214

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-23214.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-23214

Aliases

GHSA-5843-2p4f-57fh

Published

2025-01-20T18:09:45Z

Modified

2026-10-21T02:52:14Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator

Summary

Cosmos userbase checking vulnerability

Details

Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, as well as a server manager. By monitoring the error code returned in the login, it is possible to figure out whether a user exist or not in the database. Patched in 0.17.7.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-204"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/23xxx/CVE-2025-23214.json"
}

References

Affected packages

Git / github.com/azukaar/cosmos-server

Affected ranges

Type

GIT

Repo

https://github.com/azukaar/cosmos-server

Events

Introduced

Fixed

ef643b4882b0ec074f4021d52583c7c00eac4691

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "0.17.7"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StringRangeExpression"
        },
        {
            "range":  [
                {
                    "fixed":  "ef643b4882b0ec074f4021d52583c7c00eac4691"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "0.17.7"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Affected versions

v0.*

v0.1.15

v0.1.16

v0.1.17

v0.10.0

v0.10.1

v0.10.1-unstable

v0.10.1-unstable2

v0.10.1-unstable3

v0.10.2

v0.10.3

v0.10.4

v0.10.4-unstable

v0.10.4-unstable2

v0.10.4-unstable3

v0.10.4-unstable4

v0.11.0

v0.11.0-unstable

v0.11.0-unstable2

v0.11.0-unstable3

v0.11.0-unstable4

v0.11.0-unstable5

v0.11.1

v0.11.2

v0.11.3

v0.12.0

v0.12.0-unstable

v0.12.0-unstable10

v0.12.0-unstable11

v0.12.0-unstable12

v0.12.0-unstable13

v0.12.0-unstable14

v0.12.0-unstable15

v0.12.0-unstable16

v0.12.0-unstable17

v0.12.0-unstable18

v0.12.0-unstable19

v0.12.0-unstable2

v0.12.0-unstable20

v0.12.0-unstable21

v0.12.0-unstable22

v0.12.0-unstable23

v0.12.0-unstable24

v0.12.0-unstable25

v0.12.0-unstable26

v0.12.0-unstable27

v0.12.0-unstable28

v0.12.0-unstable29

v0.12.0-unstable3

v0.12.0-unstable30

v0.12.0-unstable31

v0.12.0-unstable32

v0.12.0-unstable33

v0.12.0-unstable34

v0.12.0-unstable35

v0.12.0-unstable36

v0.12.0-unstable37

v0.12.0-unstable38

v0.12.0-unstable39

v0.12.0-unstable4

v0.12.0-unstable40

v0.12.0-unstable41

v0.12.0-unstable42

v0.12.0-unstable43

v0.12.0-unstable44

v0.12.0-unstable45

v0.12.0-unstable46

v0.12.0-unstable47

v0.12.0-unstable48

v0.12.0-unstable49

v0.12.0-unstable5

v0.12.0-unstable50

v0.12.0-unstable51

v0.12.0-unstable6

v0.12.0-unstable7

v0.12.0-unstable8

v0.12.0-unstable9

v0.12.1

v0.12.2

v0.12.3

v0.12.4

v0.12.5

v0.12.6

v0.12.6-unstable

v0.13.0

v0.13.0-unstable0

v0.13.0-unstable1

v0.13.0-unstable10

v0.13.0-unstable11

v0.13.0-unstable2

v0.13.0-unstable3

v0.13.0-unstable4

v0.13.0-unstable5

v0.13.0-unstable6

v0.13.0-unstable7

v0.13.0-unstable8

v0.13.0-unstable9

v0.13.1

v0.13.2

v0.14.0

v0.14.0-unstable1

v0.14.0-unstable10

v0.14.0-unstable11

v0.14.0-unstable12

v0.14.0-unstable13

v0.14.0-unstable15

v0.14.0-unstable16

v0.14.0-unstable17

v0.14.0-unstable18

v0.14.0-unstable19

v0.14.0-unstable2

v0.14.0-unstable20

v0.14.0-unstable21

v0.14.0-unstable22

v0.14.0-unstable3

v0.14.0-unstable4

v0.14.0-unstable5

v0.14.0-unstable6

v0.14.0-unstable7

v0.14.0-unstable8

v0.14.0-unstable9

v0.14.1

v0.14.2

v0.14.3

v0.14.4

v0.15.0

v0.15.0-unstable10

v0.15.0-unstable11

v0.15.0-unstable12

v0.15.0-unstable13

v0.15.0-unstable14

v0.15.0-unstable15

v0.15.0-unstable16

v0.15.0-unstable17

v0.15.0-unstable18

v0.15.0-unstable19

v0.15.0-unstable21

v0.15.0-unstable22

v0.15.0-unstable23

v0.15.0-unstable24

v0.15.0-unstable25

v0.15.0-unstable26

v0.15.0-unstable27

v0.15.0-unstable28

v0.15.0-unstable29

v0.15.0-unstable8

v0.15.0-unstable9

v0.15.1-unstable1

v0.15.1-unstable2

v0.15.1-unstable3

v0.15.4

v0.15.4-unstable1

v0.15.5

v0.15.6

v0.15.7

v0.15.7-unstable1

v0.15.7-unstable2

v0.15.7-unstable3

v0.16.0

v0.16.0-unstable10

v0.16.0-unstable11

v0.16.0-unstable12

v0.16.0-unstable13

v0.16.0-unstable14

v0.16.0-unstable15

v0.16.0-unstable16

v0.16.0-unstable17

v0.16.0-unstable18

v0.16.0-unstable19

v0.16.0-unstable2

v0.16.0-unstable20

v0.16.0-unstable21

v0.16.0-unstable22

v0.16.0-unstable23

v0.16.0-unstable24

v0.16.0-unstable25

v0.16.0-unstable26

v0.16.0-unstable27

v0.16.0-unstable28

v0.16.0-unstable29

v0.16.0-unstable3

v0.16.0-unstable30

v0.16.0-unstable31

v0.16.0-unstable32

v0.16.0-unstable33

v0.16.0-unstable34

v0.16.0-unstable35

v0.16.0-unstable36

v0.16.0-unstable37

v0.16.0-unstable38

v0.16.0-unstable39

v0.16.0-unstable4

v0.16.0-unstable40

v0.16.0-unstable41

v0.16.0-unstable42

v0.16.0-unstable43

v0.16.0-unstable44

v0.16.0-unstable45

v0.16.0-unstable46

v0.16.0-unstable47

v0.16.0-unstable48

v0.16.0-unstable49

v0.16.0-unstable5

v0.16.0-unstable50

v0.16.0-unstable51

v0.16.0-unstable52

v0.16.0-unstable53

v0.16.0-unstable54

v0.16.0-unstable55

v0.16.0-unstable56

v0.16.0-unstable57

v0.16.0-unstable58

v0.16.0-unstable59

v0.16.0-unstable6

v0.16.0-unstable60

v0.16.0-unstable61

v0.16.0-unstable62

v0.16.0-unstable7

v0.16.0-unstable8

v0.16.0-unstable9

v0.16.1

v0.16.1-unstable1

v0.16.1-unstable2

v0.16.2

v0.16.3

v0.16.3-unstable1

v0.16.3-unstable2

v0.17.0

v0.17.0-unstable1

v0.17.0-unstable10

v0.17.0-unstable11

v0.17.0-unstable12

v0.17.0-unstable13

v0.17.0-unstable14

v0.17.0-unstable15

v0.17.0-unstable16

v0.17.0-unstable17

v0.17.0-unstable18

v0.17.0-unstable19

v0.17.0-unstable2

v0.17.0-unstable20

v0.17.0-unstable21

v0.17.0-unstable22

v0.17.0-unstable23

v0.17.0-unstable24

v0.17.0-unstable25

v0.17.0-unstable26

v0.17.0-unstable27

v0.17.0-unstable28

v0.17.0-unstable29

v0.17.0-unstable3

v0.17.0-unstable30

v0.17.0-unstable4

v0.17.0-unstable5

v0.17.0-unstable6

v0.17.0-unstable7

v0.17.0-unstable8

v0.17.0-unstable9

v0.17.1

v0.17.2

v0.17.3

v0.17.4

v0.17.5

v0.17.6

v0.2.0

v0.3.0-unstable

v0.3.0-unstable4

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.4.0

v0.4.0-unstable

v0.4.0-unstable10

v0.4.0-unstable11

v0.4.0-unstable12

v0.4.0-unstable2

v0.4.0-unstable3

v0.4.0-unstable4

v0.4.0-unstable5

v0.4.0-unstable6

v0.4.0-unstable7

v0.4.0-unstable8

v0.4.0-unstable9

v0.4.1

v0.4.2

v0.4.3

v0.5.0

v0.5.0-unstable

v0.5.0-unstable10

v0.5.0-unstable11

v0.5.0-unstable12

v0.5.0-unstable13

v0.5.0-unstable14

v0.5.0-unstable15

v0.5.0-unstable16

v0.5.0-unstable17

v0.5.0-unstable18

v0.5.0-unstable19

v0.5.0-unstable2

v0.5.0-unstable20

v0.5.0-unstable21

v0.5.0-unstable22

v0.5.0-unstable23

v0.5.0-unstable24

v0.5.0-unstable25

v0.5.0-unstable26

v0.5.0-unstable27

v0.5.0-unstable28

v0.5.0-unstable29

v0.5.0-unstable3

v0.5.0-unstable30

v0.5.0-unstable4

v0.5.0-unstable5

v0.5.0-unstable6

v0.5.0-unstable7

v0.5.0-unstable8

v0.5.0-unstable9

v0.5.1

v0.5.12

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.5.7-unstable

v0.5.8

v0.5.9

v0.6.0

v0.6.0-unstable

v0.6.0-unstable2

v0.6.1

v0.6.2

v0.6.3

v0.6.4

v0.6.4-unstable

v0.7.0

v0.7.0-unstable

v0.7.0-unstable2

v0.7.0-unstable3

v0.7.1

v0.7.10

v0.7.2

v0.7.3

v0.7.4

v0.7.5

v0.7.6

v0.7.7

v0.7.8

v0.7.9

v0.8.0

v0.8.0-unstable

v0.8.0-unstable10

v0.8.0-unstable11

v0.8.0-unstable12

v0.8.0-unstable2

v0.8.0-unstable3

v0.8.0-unstable4

v0.8.0-unstable5

v0.8.0-unstable7

v0.8.0-unstable8

v0.8.0-unstable9

v0.8.1

v0.8.10

v0.8.11

v0.8.2

v0.8.3

v0.8.4

v0.8.5

v0.8.6

v0.8.7

v0.8.8

v0.8.9

v0.9.0

v0.9.0-unstable

v0.9.0-unstable10

v0.9.0-unstable11

v0.9.0-unstable12

v0.9.0-unstable13

v0.9.0-unstable2

v0.9.0-unstable3

v0.9.0-unstable4

v0.9.0-unstable5

v0.9.0-unstable6

v0.9.0-unstable7

v0.9.0-unstable8

v0.9.0-unstable9

v0.9.1

v0.9.10

v0.9.11

v0.9.12

v0.9.13

v0.9.14

v0.9.15

v0.9.16

v0.9.17

v0.9.18

v0.9.19

v0.9.19-unstable

v0.9.2

v0.9.20

v0.9.21

v0.9.3

v0.9.4

v0.9.5

v0.9.6

v0.9.7

v0.9.8

v0.9.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-23214.json"