CVE-2025-54321

Published: Nov 18, 2025Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.

Affected (1)

Products: Ascertia: Signinghub

Ascertia

1 product

Signinghub

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ascertia Signinghub	Up to 8.6.8

Related CWEs

CWE-799

Improper Control of Interaction Frequency

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

References (2)

https://github.com/saykino/CVE-2025-54321

Source: cve@mitre.org

Third Party Advisory

https://www.ascertia.com/company/vulnerability-disclosure-policy/

Source: cve@mitre.org

Vendor Advisory

Timeline

No history available yet.