Volo.Abp.Account.Web

NuGet1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting Volo.Abp.Account.Webpage 1 of 1

CVE-2025-65581MEDIUMCVSS 5.3EG 5.3✓ Fixed in 10.0.0-rc.2
2025-12-16
vulnerable: 5.1.0 ... 9.3.7 (85 versions)
An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary ext…

Check whether Volo.Abp.Account.Web is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for Volo.Abp.Account.Web CVEs against the assets you own.

Start Free Scan →