PT-2025-38677 · Unknown · Smartstore

Kkc73 · Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-10778

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Smartstore versions prior to 6.2.1

Description A race condition exists in the Gift Voucher Handler component of Smartstore. The issue is located in an unknown function within the /checkout/confirm/ file. The attack can be initiated remotely and is considered difficult to exploit, with high complexity. The vendor was contacted regarding this issue but did not respond.

Recommendations Update Smartstore to version 6.2.1 or later.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2025-10778

Affected Products

Smartstore

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10778 · Security Note
• https://t.me/CVEtracker/33023 · Telegram Post
• https://vuldb.com/?id.325134 · Note
• https://vuldb.com/?ctiid.325134 · Note
• https://vuldb.com/?submit.640785 · Note