CVE-2025-56223
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Lack of rate limiting in the /Home/UploadStreamDocument component of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) by uploading an excessive number of files.
Risk Assessment
An attacker can overwhelm the server, causing service unavailability for legitimate users, leading to business disruptions.
Recommendation
Implement rate limiting mechanisms for the /Home/UploadStreamDocument endpoint and update SigningHub to the latest patched version.
Other vulnerabilities in SigningHub
See all- CVE-2025-56218Critical
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file.
- CVE-2025-56224High
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to bypass verification via a bruteforce attack.
- CVE-2025-56219High
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without rate limiting, leading to resource exhaustion and Denial of Service (DoS).
Original NVD description (English source)
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an excessive number of files.