Description
A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Shopware | Shopware | 6.6.x, 6.7.x | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopware/platform | <= 6.6.10.4 | — | GHSA-27gv-mg7w-mm34 |
References
- https://github.com/shopware/shopware/issues/11245 issue-tracking