CVE-2025-56223

A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an…

High · published October 20, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

⚡ An overload of files could bring your SigningHub instance to a standstill! 🚨 Think of it like a restaurant with no limit on reservations—if too many guests show up at once, chaos erupts and no one gets served. Here, attackers can upload excessive files, overwhelming the system much like a crowded dining room. If exploited, this vulnerability could cause a Denial of Service (DoS), rendering your SigningHub unusable. Users would be left waiting indefinitely, unable to upload documents, which could halt crucial business operations. It’s an absolute nightmare scenario for productivity!

Put simply

Think of it like a restaurant with no limit on reservations—if too many guests show up at once, chaos erupts and no one gets served. Here, attackers can upload excessive files, overwhelming the system much like a crowded dining room. The lack of rate limiting in the /Home/UploadStreamDocument component of SigningHub v8.6.8 allows attackers to flood the service with file uploads, causing the system to become unresponsive due to excessive demand.

What to do

If exploited, this vulnerability could cause a Denial of Service (DoS), rendering your SigningHub unusable. Users would be left waiting indefinitely, unable to upload documents, which could halt crucial business operations. It’s an absolute nightmare scenario for productivity! To secure your installation, implement rate limiting on file uploads to restrict the number of requests from a single source. Additionally, consider updating to the latest version of SigningHub to incorporate security improvements. Stay vigilant and monitor for unusual activity! You've got this! Take action and keep your systems running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00464 · 39.2th percentile
Published
2025-10-20T00:00Z
EPSS history
Timeline
  • 20 OCT 00:00Z
    A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a Denial of Service (DoS) via uploading an…
    cvelistv5