CVE-2025-7954 — Race Condition in Shopware Voucher Submission

CVE-2025-7954

Race Condition in Shopware Voucher Submission PUBLISHED

Description (CNA)

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.

Affected (CNA)

Vendor / product	Versions
Shopware / Shopware	affected 6.6.x; affected 6.7.x

CWE

CWE-362

References

https://github.com/shopware/shopware/issues/11245

ADP enrichment

CISA-ADP

No English description supplied.

https://github.com/shopware/shopware/issues/11245

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2025/Aug/17