Vulnerabilities > CVE-2025-29784 - Improper Validation of Specified Quantity in Input vulnerability in Namelessmc Nameless

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

namelessmc

CWE-1284

NVD

Published: 2025-04-18

Updated: 2025-05-13

Summary

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to performance degradation and potential denial-of-service (DoS) attacks. This issue has been patched in version 2.2.0.

Vulnerable Configurations

Part	Description	Count
Application	Namelessmc Namelessmc Nameless 1.0.0 Namelessmc Nameless 1.0.1 Namelessmc Nameless 1.0.2 Namelessmc Nameless 1.0.3 Namelessmc Nameless 1.0.4 Namelessmc Nameless 1.0.5 Namelessmc Nameless 1.0.6 Namelessmc Nameless 1.0.7 Namelessmc Nameless 1.0.8 Namelessmc Nameless 1.0.9 Namelessmc Nameless 1.0.10 Namelessmc Nameless 1.0.11 Namelessmc Nameless 1.0.12 Namelessmc Nameless 1.0.13 Namelessmc Nameless 1.0.14 Namelessmc Nameless 1.0.15 Namelessmc Nameless 1.0.16 Namelessmc Nameless 1.0.17 Namelessmc Nameless 1.0.18 Namelessmc Nameless 1.0.19 Namelessmc Nameless 1.0.20 Namelessmc Nameless 1.0.21 Namelessmc Nameless 1.0.22 Namelessmc Nameless 2.0.0 Namelessmc Nameless 2.0.1 Namelessmc Nameless 2.0.2 Namelessmc Nameless 2.0.3	40

Common Weakness Enumeration (CWE)

CWE-1284 - Improper Validation of Specified Quantity in Input

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References