Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2025-7954

Race Condition in Shopware Voucher Submission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shopware Shopware

Default version status: unaffected

  • 6.6.xaffected
  • 6.7.xaffected

References