Moderate severityOSV Advisory· Published Dec 16, 2025· Updated Dec 16, 2025
CVE-2025-65581
CVE-2025-65581
Description
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
Volo.Abp.Account.WebNuGet | >= 5.1.0, < 10.0.0-rc.2 | 10.0.0-rc.2 |
Affected products
2Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.