CVE-2025-29784
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 18, 2025
Updated: May 13, 2025
CWE ID 130
CWE ID 20
CWE ID 1284
Summary
CVE-2025-29784 is a vulnerability affecting the NamelessMC software used for Minecraft servers. In versions prior to 2.2.0, the s parameter in GET requests for the forum search functionality does not undergo adequate length validation. This issue permits attackers to submit overly long search queries, potentially causing performance degradation and instigating denial-of-service (DoS) attacks. This vulnerability has been rectified in the updated version 2.2.0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Namelessmc