PT-2025-42757 · Unknown · Signinghub

Published 2025-10-20 · Updated 2025-10-27 · CVE-2025-56223

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SigningHub version 8.6.8

Description A missing rate limit in the /Home/UploadStreamDocument component enables attackers to trigger a Denial of Service (DoS) by uploading a large number of files. The issue stems from the absence of controls on the number of file uploads allowed within a specific timeframe.

Recommendations Apply a rate limit to the /Home/UploadStreamDocument component to restrict the number of file uploads allowed per user or IP address within a defined period.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-56223

Affected Products

Signinghub

References · 12

• 🔥 https://github.com/saykino/CVE-2025-56223 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-56223 · Security Note
• https://osv.dev/vulnerability/CVE-2025-56223 · Vendor Advisory
• https://t.me/cveNotify/139435 · Telegram Post
• https://twitter.com/cracbot/status/1981677097686085874 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1980265707406270706 · Twitter Post
• https://t.me/cveNotify/140453 · Telegram Post
• http://ascertia.com · Note
• https://t.me/cveNotify/139374 · Telegram Post
• https://twitter.com/cracbot/status/1982039478639497611 · Twitter Post
• http://signinghub.com · Note
• https://twitter.com/CVEnew/status/1980268374438318316 · Twitter Post