Vulnerability in Namelessmc Nameless
CVE-2025-22144
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. A user with admincp.core.emails or admincp.users.edit permissions can validate users and an attacker can reset their password. When the account is success…
EPSS: 0.004 (61.6th percentile) — read the EPSS interpretation.
Affected products
- Namelessmc Nameless — versions <= 2.1.2
Weakness classification (CWE)
References
- https://github.com/NamelessMC/Nameless/security/advisories/GHSA-p883-7496-x35p (x_refsource_CONFIRM)
- https://github.com/NamelessMC/Nameless/releases/tag/v2.1.3 (x_refsource_MISC)