high8.1
CVE-2025-7954
Shopware race condition bypasses voucher restrictions
Impact
A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | shopware/platform | <= 6.6.10.4 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shopware | Shopware | from 6.6.0.0 before 6.7.2.0 |