CVE-2025-31118CWE-400

NamelessMC Has Forum Reply Submission Time Limit Bypass

High · published April 18, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, forum quick reply feature (view_topic.php) does not implement any spam prevention mechanism. This allows authenticated users to continuously post replies without any time restriction, resulting in an uncontrolled surge of posts that can disrupt normal operations. This issue has been patched in version 2.2.0.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2025-04-18T15:52Z
EPSS history
Timeline
  • 18 APR 15:52Z
    NamelessMC Has Forum Reply Submission Time Limit Bypass
    cvelistv5