7.1

CVE-2025-56219

EPSS 0.3%
Veröffentlicht 20.10.2025 00:00:00
Zuletzt bearbeitet 05.07.2026 17:17:16
CVE-Watchlists
Login
Unerledigt
Login

Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiting. This can lead to a resource exhaustion and a Denial of Service (DoS) when an excessively large number of user accounts are created.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ascertia ≫ Signinghub Version <= 8.6.8

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.218

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
CISA-ADP	7.1	2.8	4.2	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://github.com/saykino/CVE-2025-56219

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-56219

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-56219

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-56219

EUVD