PT-2025-17311 · Unknown · Namelessmc

Yuhano · Published 2025-04-18 · Updated 2025-05-13 · CVE-2025-31118

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions NamelessMC versions 2.1.4 and prior

Description The issue concerns the forum quick reply feature, which does not implement any spam prevention mechanism in the affected versions. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations.

Recommendations For versions 2.1.4 and prior, update to version 2.2.0 to resolve the issue. As a temporary workaround, consider restricting access to the view topic.php endpoint or implementing custom spam prevention measures until the update can be applied.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-31118

GHSA-JHVP-MWJ4-922M

Affected Products

Namelessmc

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/31xxx/CVE-2025-31118.json · Exploit
• 🔥 https://github.com/NamelessMC/Nameless/security/advisories/GHSA-jhvp-mwj4-922m · Exploit
• https://github.com/NamelessMC/Nameless/commit/51e9d93aaa28d40f060b807533d22b768abea207 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-31118 · Security Note
• https://osv.dev/vulnerability/CVE-2025-31118 · Vendor Advisory
• https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0 · Note
• https://t.me/cvedetector/23320 · Telegram Post
• https://t.me/cvetracker/21931 · Telegram Post
• https://t.me/cvenotify/121966 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1913424837487317385 · Twitter Post
• https://twitter.com/CVEnew/status/1913312933167460719 · Twitter Post
• https://t.me/latest_high_impact_cve/2158 · Telegram Post