[MEDIUM] Shopware SSO referer trust leading to an arbitrary redirect target

PKSA-xknd-fd7t-crfc CVE-2026-48012 GHSA-4x3x-869w-xx3m

Affected package: shopware/core

Affected version: >=6.7.3.0,<6.7.10.1

Reported by:
GitHub