Skip to content
OpenAdvisories

Package · NuGet

Volo.Abp.Account.Web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    CVE-2025-65581

    ABP Account Module has an Open Redirect through Improper validation in its register function

    An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.

    Volo.Abp.Account.Web NuGet