CVE-2025-7954CWE-362

Race Condition in Shopware Voucher Submission

Medium · published August 6, 2025

CVSS v4.0
6.0
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/AU:N
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2025-08-06T07:16Z
EPSS history
Timeline
  • 06 AUG 07:16Z
    Race Condition in Shopware Voucher Submission
    cvelistv5