Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65581
5.3
MEDIUMCVSS v3
Published
December 16, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.
abpframework/abp
GitHubOpen-source web application framework for ASP.NET Core! Offers an opinionated architecture to build enterprise software solutions with best practices on top of the .NET. Provides the fundamental infrastructure, cross-cutting-concern implementations, startup templates, application modules, UI themes, tooling and documentation.
GitHubOpen-source web application framework for ASP.NET Core! Offers an opinionated architecture to build enterprise software solutions with best practices on top of the .NET. Provides the fundamental infrastructure, cross-cutting-concern implementations, startup templates, application modules, UI themes, tooling and documentation.>= 5.1.0, < 10.0.0, = 10.0.0NVD