{"id":"EUVD-2025-203823","enisaUuid":"c2d99326-65ed-341e-9f53-eb5c535aaf54","description":"An open redirect vulnerability exists in the Account module in Volosoft ABP Framework \u003e\u003d 5.1.0 and \u003c 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.","datePublished":"Dec 16, 2025, 12:00:00 AM","dateUpdated":"Dec 16, 2025, 7:14:01 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/abpframework/abp/commit/a01adc58464d278ca817c4bbb6cbce30f155d0d1\nhttps://github.com/abpframework/abp/commit/44a2dc14e933f3ce1ca93f9313d836694ab77d1d\n","aliases":"CVE-2025-65581\nGHSA-vfm5-cr22-jg3m\n","assigner":"mitre","epss":0.28,"enisaIdProduct":[{"id":"074c6214-e95c-3694-bb48-ab7fb90d1664","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"56a2f9ce-496b-33fe-8f61-9ae39f57038d","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"4a4487bc-ffde-3956-b3fa-b36f0cd90459","vulnerability":{"id":"CVE-2025-65581","description":"An open redirect vulnerability exists in the Account module in Volosoft ABP Framework \u003e\u003d 5.1.0 and \u003c 10.0.0-rc.2. Improper validation of the returnUrl parameter in the register function allows an attacker to redirect users to arbitrary external domains.","datePublished":"Dec 16, 2025, 12:00:00 AM","dateUpdated":"Dec 16, 2025, 7:14:01 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":"https://github.com/abpframework/abp/commit/a01adc58464d278ca817c4bbb6cbce30f155d0d1\nhttps://github.com/abpframework/abp/commit/44a2dc14e933f3ce1ca93f9313d836694ab77d1d\n","enisa_id":"EUVD-2025-203823\n","assigner":"mitre","epss":0.28,"dataProcessed":"Oct 29, 2026, 7:19:45 AM","vulnerabilityProduct":[{"id":"c170a714-2a0b-30ff-af50-b7a1bc0d11de","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"94f59c1b-7ef3-337d-804a-eeef2489bfd7","vendor":{"name":"n/a"}}]}},{"id":"d1c87b4b-f749-36bd-b901-b78ce6273cdb","vulnerability":{"id":"GHSA-vfm5-cr22-jg3m","description":"ABP Account Module has an Open Redirect through Improper validation in its register function","datePublished":"Dec 16, 2025, 6:31:35 PM","dateUpdated":"Dec 16, 2025, 11:12:33 PM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-65581\nhttps://github.com/abpframework/abp/commit/44a2dc14e933f3ce1ca93f9313d836694ab77d1d\nhttps://github.com/abpframework/abp/commit/a01adc58464d278ca817c4bbb6cbce30f155d0d1\nhttps://github.com/abpframework/abp\n","enisa_id":"EUVD-2025-203823\n","aliases":"GHSA-vfm5-cr22-jg3m\nCVE-2025-65581\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:52:34 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}