PT-2025-28893 · Ascertia · Signinghub

CVE-2025-54321 · Published 2025-07-09 · Updated 2025-11-19

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ascertia SigningHub versions through 8.6.8

Description A lack of rate limiting on the reset password function allows an authenticated attacker to automate reset password requests, resulting in an email bombing condition.

Recommendations Versions prior to 8.6.8 should be updated.

Exploit

Fix

Weakness Enumeration

CWE-799

Related Identifiers

CVE-2025-54321

Affected Products

Signinghub

References · 10

• 🔥 https://github.com/saykino/CVE-2025-54321 · Exploit
• https://osv.dev/vulnerability/CVE-2025-54321 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54321 · Security Note
• https://ascertia.com/company/vulnerability-disclosure-policy · Vendor Advisory
• https://t.me/cveNotify/143252 · Telegram Post
• https://twitter.com/irsdl/status/1942892879426245091 · Twitter Post
• https://twitter.com/cr34t0r_Cyxac/status/1982281600227508559 · Twitter Post
• https://t.me/CVEtracker/37659 · Telegram Post
• https://twitter.com/CVEnew/status/1991042994833592488 · Twitter Post
• https://twitter.com/huzayyfah/status/1943357743584174132 · Twitter Post