Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-29784

NamelessMC Has Lack of Length Validation for s Parameter in GET Requests

Description

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, the s parameter in GET requests for forum search functionality lacks length validation, allowing attackers to submit excessively long search queries. This oversight can lead to performance degradation and potential denial-of-service (DoS) attacks. This issue has been patched in version 2.2.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NamelessMC Nameless

  • < 2.2.0affected

References