PT-2025-4380 · Unknown · Namelessmc

Hicortab · Published 2025-01-13 · Updated 2025-05-13 · CVE-2025-22144

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NamelessMC versions prior to 2.1.3

Description The issue allows an attacker to reset user passwords via the forgot password link. This can be achieved when a user with admincp.core.emails or admincp.users.edit permissions manually validates a user account, resulting in an empty reset code. An attacker can exploit this by requesting the "http://localhost/nameless/index.php?route=/forgot password/&c=" endpoint and resetting the password, potentially compromising another user's password and taking over their account.

Recommendations For versions prior to 2.1.3, update to version 2.1.3 to resolve the issue. As a temporary workaround, consider restricting access to the "http://localhost/nameless/index.php?route=/forgot password/&c=" endpoint until the update is applied. Avoid using the forgot password feature for user accounts validated manually by users with admincp.core.emails or admincp.users.edit permissions until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-610

CWE-640

Related Identifiers

CVE-2025-22144

GHSA-P883-7496-X35P

Affected Products

Namelessmc

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22144.json · Exploit
• 🔥 https://github.com/NamelessMC/Nameless/security/advisories/GHSA-p883-7496-x35p · Exploit
• https://osv.dev/vulnerability/CVE-2025-22144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22144 · Security Note
• https://github.com/NamelessMC/Nameless/releases/tag/v2.1.3 · Note
• https://t.me/cvenotify/121962 · Telegram Post
• https://twitter.com/CVEnew/status/1878898576308191415 · Twitter Post
• https://t.me/cvedetector/15173 · Telegram Post
• https://twitter.com/CveFindCom/status/1878895303434154323 · Twitter Post