CVE-2025-30151
Shopware allows Denial Of Service via password length
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Shopware allows Denial Of Service via password length
Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.
Reserved 2025-03-17 | Published 2025-04-08 | Updated 2025-04-08 | Assigner GitHub_MCWE-20: Improper Input Validation
github.com/...opware/security/advisories/GHSA-cgfj-hj93-rmh2
Support options
