Nameless CVE-2022-2821

HIGH

Missing Critical Step in Authentication (CWE-304)

2022-08-15 security@huntr.dev

Information Disclosure Nameless Namelessmc

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Aug 15, 2022 - 11:21 nvd

HIGH 7.5

DescriptionNVD

Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2.

AnalysisAI

Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified under CWE-304. Missing Critical Step in Authentication in GitHub repository namelessmc/nameless prior to v2.0.2. Affected products include: Namelessmc Nameless.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nameless

View all

CVE-2025-32389 HIGH This Week POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated high severity (CVSS 8.6), thi

CVE-2022-2820 HIGH This Week POC

Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2. Rated high severity (CVSS 8.2), this vulnerab

CVE-2025-29784 HIGH This Week POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated high severity (CVSS 7.5), thi

CVE-2025-30357 HIGH This Week POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated high severity (CVSS 7.3), thi

CVE-2025-31118 HIGH This Week POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated high severity (CVSS 7.1), thi

CVE-2025-30158 HIGH This Week POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated high severity (CVSS 7.1), thi

CVE-2025-31120 MEDIUM This Month POC

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Rated medium severity (CVSS 5.3), t

CVE-2026-33398 HIGH This Week

Broken access control in NamelessMC 2.2.4 (Minecraft community website software) allows any low-privileged authenticated

CVE-2026-40314 MEDIUM This Month

Missing authorization controls in NamelessMC 2.2.4 expose private profile post reaction data to unauthenticated visitors

CVE-2026-34460 MEDIUM This Month

OAuth login CSRF in NamelessMC 2.2.4 and prior enables session swapping by exploiting the absence of server-side state p

CVE-2026-35447 MEDIUM This Month

Authorization bypass in NamelessMC 2.2.4's profile wall system allows low-privileged authenticated users to post to priv

CVE-2026-40571 MEDIUM This Month

Missing authorization in NamelessMC 2.2.4 allows authenticated low-privileged users to add reactions to wall posts on pr

Same weakness CWE-304 – Missing Critical Step in Authentication

View all

CVE-2024-8954 CRITICAL POC

CVE-2024-12048 HIGH POC

CVE-2022-40622 HIGH POC

CVE-2022-1065 HIGH POC

CVE-2024-2172 CRITICAL

CVE-2024-45764 CRITICAL

CVE-2022-2302 CRITICAL

CVE-2026-59564 CRITICAL

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

CVE-2021-34523 CRITICAL POC

CVE-2013-2251 CRITICAL POC

CVE-2017-5638 CRITICAL POC

CVE-2025-24813 CRITICAL POC

CVE-2015-1701 HIGH POC

CVE-2017-0147 HIGH POC

CVE-2014-6324 HIGH POC

Share

CVE-2022-2821 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy