Volosoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Volosoft products: 1 record(s), with severity, exploitation and fixes.

Abp 1

Exploited only (KEV) →

CVE-2025-65581 Medium · 5.3 CWE-601 Dec 16, 2025

Open Redirect in Volosoft Abp

An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.