Vulnerabilidades de Ascertia
CVEs publicadas que afetam produtos de Ascertia: 8 registro(s), com severidade, exploração e correções.
CVE-2025-61166
Média · 6.1
CWE-601 06/04/2026
Open Redirect em Ascertia Signinghub
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
CVE-2025-54321
Crítica · 9.8
CWE-799 18/11/2025
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset…
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.
CVE-2025-54320
Média · 4.3
CWE-770 18/11/2025
Allocation of Resources Without Limits or Throttling em Ascertia Signinghub
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.
CVE-2025-56224
Alta · 8.1
CWE-307 20/10/2025
Improper Restriction of Excessive Authentication Attempts em Ascertia Signinghub
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.
CVE-2025-56223
Alta · 7.5
CWE-770 20/10/2025
Allocation of Resources Without Limits or Throttling em Ascertia Signinghub
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.
CVE-2025-56219
Alta · 7.1
CWE-284 20/10/2025
Improper Access Control em Ascertia Signinghub
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.
CVE-2025-56221
Crítica · 9.8
CWE-307 17/10/2025
Improper Restriction of Excessive Authentication Attempts em Ascertia Signinghub
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack.
CVE-2025-56218
Crítica · 9.8
CWE-434 17/10/2025
Unrestricted Upload of File with Dangerous Type em Ascertia Signinghub
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.