Ascertia SigningHub Denial-of-Service Vulnerability in Upload Document API

A denial-of-service vulnerability has been identified in Ascertia SigningHub version 8.6.8 and prior. The issue arises in the Upload Document API component, where a lack of rate limiting allows attackers to upload an excessive number of files. This unrestricted file upload capability can lead to resource exhaustion, such as depleting disk space, increasing server load, or degrading overall performance.

Impact

Exploitation of this vulnerability can cause significant resource exhaustion on the server, leading to degraded performance, increased load, and potential disk space depletion.

Remediation

It is recommended to implement rate limiting for the Upload Document API to prevent excessive file uploads. Users can update to SigningHub versions after 8.6.8, where this vulnerability has been addressed.