saykino/CVE-2025-54320

saykino/CVE-2025-54320

Releases0

CVE History

CVEPublishedCVSS v3CVSS v2
4.3 MEDIUM

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.