Volosoft ABP Framework Open Redirect Vulnerability in Account Module

An open redirect vulnerability has been identified in the Account module of Volosoft ABP Framework, affecting versions 5.1.0 prior to 10.0.0-rc.2. The vulnerability arises from inadequate validation of the returnUrl parameter in the registration function, allowing attackers to redirect users to arbitrary external domains.

Impact

Exploitation of this vulnerability allows for open redirect attacks, where users can be sent to malicious external sites, potentially leading to phishing or other malicious activities.

Remediation

Users can upgrade to Volosoft ABP Framework version 10.0.0-rc.2 or later to address this vulnerability.