CVE-2024-48322 Information

Description

UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.

Reference

https://github.com/runcodes-icmc/server https://github.com/runcodes-icmc/server/issues/12 https://github.com/trqt/CVE-2024-48322 https://github.com/runcodes-icmc/server/releases/tag/v1.5.3