Ascertia SigningHub versions through 8.6.8 have a vulnerability due to lack of rate limiting on the invite user function. This flaw allows an authenticated attacker to automate invite requests, resulting in an email bombing attack. The vulnerability has a medium severity rating with a CVSS score of 4.3.