Shopware · Shopware · CVE-2025-30151
Name of the Vulnerable Software and Affected Versions:
Shopware versions prior to 6.6.10.3
Shopware versions prior to 6.5.8.17
Description:
The issue allows an attacker to cause a Denial of Service by passing long passwords via forms in Storefront forms or Store-API.
Recommendations:
For versions prior to 6.6.10.3, update to version 6.6.10.3 or later.
For versions prior to 6.5.8.17, update to version 6.5.8.17 or later.
For older versions of 6.4, install the corresponding security plugin.
As a general recommendation, updating to the latest Shopware version is advised for the full range of functions.