CVE-2025-7954 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restricti…
Medium CVSS: 6.0

CVE-2025-7954

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.
Vendor
Shopware
Product
Shopware
CWE
CWE-362
Yayın Tarihi
2025-08-06 08:15:30
Güncelleme
2025-11-03 20:19:21
Source Identifier
551230f0-3615-47bd-b7cc-93e92e730bbf
KEV Date Added
-

Kategoriler

CWE-362 Shopware MEDIUM Shopware 2025

Referanslar

https://github.com/shopware/shopware/issues/11245 http://seclists.org/fulldisclosure/2025/Aug/17 https://github.com/shopware/shopware/issues/11245