HIGH🇵🇱 Wersja polska

CVE-2025-56219

CVSS 7.1v3.1pub. 2025-10-20upd. 2026-07-05

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

  • Ascertia Signinghub

    APP
    Ascertia
    ≤ 8.6.8
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2025-54321CRITICAL9.8PL ✓ten sam produkt

Brak rate limiting w funkcji resetowania hasła w Ascertia SigningHub

CVE-2025-56218CRITICAL9.8PL ✓ten sam produkt

Dowolne przesyłanie plików w SigningHub umożliwia RCE

CVE-2025-56221CRITICAL9.8PL ✓ten sam produkt

Brak rate limiting w SigningHub umożliwia atak brute force na logowanie

CVE-2025-56223HIGH7.5ten sam produkt

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to c...

CVE-2025-56224HIGH8.1ten sam produkt

A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attac...