CVE-2025-30158

Summary

CVE-2025-30158 is a vulnerability affecting the NamelessMC Minecraft server software. In versions prior to 2.2.0, the forum integrated with NamelessMC allows users to post iframe elements in forum topics, comments, and feeds without restrictions on width and height attributes. An authenticated attacker can exploit this weakness by injecting oversized iframes, resulting in a UI-based denial of service (DoS) attack. This issue disrupts normal user interactions by blocking the forum UI with the injected iframes. The vulnerability has been mitigated in version 2.2.0.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.