The vulnerability is an unauthenticated open redirect in the logout handling of Saurus CMS Community Edition. The logout endpoint accepts a ‘url’ parameter via GET or POST and forwards it directly to the HTTP Location header without validating the scheme, domain, or ensuring the path is relative. This flaw allows an attacker to craft a logout URL that redirects authenticated users to an arbitrary external site or to a javascript: URI, enabling credential theft by phishing or abusing OAuth redirects. The weakness is identified as CWE‑601.

Saurus CMS Community Edition is affected. No specific product versions are listed in the CNA data, so all releases of the Community Edition remain potentially vulnerable until a fix is applied.

The CVSS score of 5.1 marks it as moderate severity. EPSS is not provided, which suggests limited publicly known exploit activity, but the exploit is straightforward: an attacker only needs to craft a malicious logout link that a logged‑in user will click. The flaw is not listed in the CISA KEV catalog, indicating no confirmed active exploitation yet. Nonetheless, because the redirect occurs after session destruction, it can be leveraged for phishing or redirect-based fraud attacks.