Vulnerability in NamelessMC Website Software for Minecraft Servers
CVE-2025-31118

7.1HIGH

Key Information:

Vendor

NamelessMC

Status
NamelessMC
Vendor
CVE Published:
18 April 2025

What is CVE-2025-31118?

The NamelessMC website software, widely used for managing Minecraft servers, has a vulnerability in its forum quick reply feature. Versions 2.1.4 and earlier lack an adequate spam prevention mechanism, enabling authenticated users to flood the forum with repeated replies without any time limitations. This can lead to significant disruptions in forum activity and user experience. This issue has been addressed and patched in version 2.2.0, which implements necessary restrictions to control the posting frequency.

References

https://github.com/NamelessMC/Nameless/commit/51e9d93aaa2...
https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0
https://github.com/NamelessMC/Nameless/security/advisorie...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.