CVE-2025-54320: Signinghub: güvenlik açığı

Açıklama (NVD)

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.

Özet bilgiler

Ürün

Ascertia Signinghub

CVSS v3.1

4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

%0,35 (yüzdelik 29)

CWE

CWE-770

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• www.ascertia.com
• CWE-770