Volosoft Abp vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Volosoft Abp: 1 record(s), with affected versions and fixes.
cpe:2.3:a:volosoft:abp

CVE-2025-65581 Medium · 5.3 CWE-601 Dec 16, 2025

Open Redirect in Volosoft Abp

An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.