saykino/CVE-2025-54321

saykino/CVE-2025-54321

Releases0

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.