UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.Referenceshttps://github.com/runcodes-icmc/serverhttps://github.com/runcodes-icmc/server/issues/12https://github.com/trqt/CVE-2024-48322https://github.com/runcodes-icmc/server/releases/tag/v1.5.3