PT-2025-17310 · Unknown · Namelessmc

Gyutrange · Published 2025-04-18 · Updated 2025-05-13 · CVE-2025-30357

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions NamelessMC versions 2.1.4 and prior

Description The issue arises when a malicious user leaves spam comments on many topics. If an administrator deletes the malicious user's account, all their posts along with the associated topics by unrelated users will be marked as deleted.

Recommendations For versions 2.1.4 and prior, update to version 2.2.0 to resolve the issue.

Exploit

Fix

LPE

Weakness Enumeration

CWE-706

Related Identifiers

CVE-2025-30357

GHSA-22MC-7C9M-GV8H

Affected Products

Namelessmc

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/30xxx/CVE-2025-30357.json · Exploit
• https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8h · Vendor Advisory
• https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7f · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-30357 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30357 · Vendor Advisory
• https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0 · Note
• https://t.me/cvetracker/21930 · Telegram Post
• https://twitter.com/CVEnew/status/1913312934190870786 · Twitter Post
• https://t.me/cvenotify/121965 · Telegram Post
• https://t.me/cvedetector/23319 · Telegram Post
• https://t.me/latest_high_impact_cve/2158 · Telegram Post