{"action":"Upgrade Volo.Abp.Account.Web to 10.0.0-rc.2 or later.","affected":[{"fixed":"10.0.0-rc.2","introduced":"5.1.0"}],"component":"Volo.Abp.Account.Web","cve_ids":["CVE-2025-65581"],"ecosystem":"NuGet","epss":0.00278,"exploited":false,"fixed_versions":["10.0.0-rc.2"],"ghsa_id":"GHSA-vfm5-cr22-jg3m","id":"tcs_01M5N91KG193H1RGD2QA6Q7QHR","modified_at":"2025-12-16T23:26:15.678618Z","published_at":"2025-12-16T18:31:35Z","references":["https://osv.dev/vulnerability/GHSA-vfm5-cr22-jg3m","https://nvd.nist.gov/vuln/detail/CVE-2025-65581","https://github.com/abpframework/abp/commit/44a2dc14e933f3ce1ca93f9313d836694ab77d1d","https://github.com/abpframework/abp/commit/a01adc58464d278ca817c4bbb6cbce30f155d0d1","https://github.com/abpframework/abp"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-vfm5-cr22-jg3m","url":"https://osv.dev/vulnerability/GHSA-vfm5-cr22-jg3m"}],"summary":"ABP Account Module has an Open Redirect through Improper validation in its register function"}