CVE-2025-54321
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can e…
Published: 2025-11-18 · CVSS: 9.8 · CVSS 3.1
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7