CVE-2025-7954
📋 TL;DR
A race condition vulnerability in Shopware's voucher system allows attackers to bypass voucher restrictions and exceed usage limits. This affects Shopware v6.6.10.4 installations, potentially allowing unauthorized discounts or free purchases. All Shopware stores using the vulnerable version are affected.
💻 Affected Systems
- Shopware
📦 What is this software?
Shopware by Shopware
⚠️ Risk & Real-World Impact
Worst Case
Attackers could apply unlimited discounts or make purchases for free, leading to significant financial loss for the merchant.
Likely Case
Attackers exploit voucher limitations to obtain unauthorized discounts on purchases.
If Mitigated
With proper rate limiting and transaction controls, impact is limited to occasional unauthorized discounts.
🎯 Exploit Status
Exploitation requires understanding of race conditions and voucher system interaction.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v6.6.10.5 or later
Vendor Advisory: https://github.com/shopware/shopware/issues/11245
Restart Required: No
Instructions:
1. Backup your Shopware installation. 2. Update to Shopware v6.6.10.5 or later via Composer or Shopware updater. 3. Clear cache and verify functionality.
🔧 Temporary Workarounds
Disable voucher functionality
allTemporarily disable voucher system to prevent exploitation
Implement rate limiting
allAdd rate limiting to voucher redemption endpoints
🧯 If You Can't Patch
- Implement strict rate limiting on voucher redemption endpoints
- Monitor voucher usage logs for suspicious patterns
🔍 How to Verify
Check if Vulnerable:
Check Shopware version in admin panel or via composer show shopware/platformCheck Version:
composer show shopware/platform | grep versionVerify Fix Applied:
Verify version is v6.6.10.5 or later and test voucher functionality📡 Detection & Monitoring
Log Indicators:
- Multiple voucher redemption attempts from same IP/session in short timeframe
- Voucher usage exceeding configured limits
Network Indicators:
- Rapid API calls to voucher redemption endpoints
SIEM Query:
source="shopware_logs" AND (voucher_redemption_count > 5 WITHIN 1s)