CVE-2025-30357

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. In version 2.1.4 and prior, if a malicious user is leaving spam comments on many topics then an administrator, unable to manually remove each spam comment, may delete the malicious account. Once an administrator deletes the malicious user's account, all their posts (comments) along with the associated topics (by unrelated users) will be marked as deleted. This issue has been patched in version 2.2.0.

• CWE-706

• https://github.com/NamelessMC/Nameless/commit/7040924e27f99aa486c619a5b4ca809051a1ca7fPatch
• https://github.com/NamelessMC/Nameless/releases/tag/v2.2.0Release Notes
• https://github.com/NamelessMC/Nameless/security/advisories/GHSA-22mc-7c9m-gv8hExploit, Vendor Advisory

Published

Apr 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30351Directus is a real-time API and App dashboard for managing S…4.3
• CVE-2025-30352Directus is a real-time API and App dashboard for managing S…5.3
• CVE-2025-30353Directus is a real-time API and App dashboard for managing S…7.5
• CVE-2025-30354Bruno is an open source IDE for exploring and testing APIs. …4.3
• CVE-2025-30355Synapse is an open source Matrix homeserver implementation. …7.5
• CVE-2025-30356CryptoLib provides a software-only solution using the CCSDS …9.8
• CVE-2025-30358Mesop is a Python-based UI framework that allows users to bu…8.1
• CVE-2025-30359webpack-dev-server allows users to use webpack with a develo…5.9
• CVE-2025-3036A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2025-30360webpack-dev-server allows users to use webpack with a develo…6.5
• CVE-2025-30361WeGIA is a Web manager for charitable institutions. A securi…9.8
• CVE-2025-30362WeGIA is a Web manager for charitable institutions. A stored…5.4