CVE-2024-48322

Description

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.

Affected Platforms

Weakness Type

CWE-367

References

• https://github.com/runcodes-icmc/server
• https://github.com/runcodes-icmc/server/issues/12
• https://github.com/runcodes-icmc/server/releases/tag/v1.5.3
• https://github.com/trqt/CVE-2024-48322