Vulnerability Description
Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without domain allowlist, scheme validation, or relative path enforcement. Attackers can craft a malicious logout URL containing an arbitrary external domain or javascript: URI scheme to redirect authenticated users to attacker-controlled phishing pages after session destruction, enabling credential theft and OAuth redirect abuse.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/DevVaibhav07/VULN-POC/blob/main/Saurus_OpenRedirect.md
- https://github.com/sauruscms/Saurus-CMS-Community-Edition
- https://www.vulncheck.com/advisories/saurus-cms-unauthenticated-open-redirect-vi
- https://github.com/DevVaibhav07/VULN-POC/blob/main/Saurus_OpenRedirect.md
FAQ
What is CVE-2026-73671?
CVE-2026-73671 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed dir...
How severe is CVE-2026-73671?
CVE-2026-73671 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-73671?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.