UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability.
mitre·CWE-367·Published 2024-11-11