Unauthenticated Open Redirect Flaw in Saurus CMS Community Edition

CVE-2026-73671

What is CVE-2026-73671?

Saurus CMS Community Edition is exposed to an unauthenticated open redirect vulnerability in its logout functionality. This issue occurs in the logout handling code, specifically within the classes/port.inc.php file, where the 'url' parameter provided through GET or POST requests is directly utilized in the Location header. This lack of domain allowlisting, scheme validation, and relative path enforcement allows attackers to devise malicious logout URLs that could redirect authenticated users to external domains or even to JavaScript URIs. Such redirects can lead users to phishing pages, jeopardizing their credentials and enabling OAuth redirect exploits after session termination.

References