CVE-2025-54118
Medium
Description
NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Sensitive information disclosure in NamelessMC before 2.2.4 allows unauthenticated remote attacker to gain sensitive information such as absolute path of the source code via list parameter. This vulnerability is fixed in 2.2.4.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Nameless
PublishedAug 18, 2025
First seenAug 18, 2025
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- namelessmc nameless2.2.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| namelessmc nameless | v < 2.2.4 | 2.2.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.