CVE-2024-48322
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Nov 11, 2024
Updated: Nov 12, 2024
CWE ID 367
Summary
CVE-2024-48322: A vulnerability has been identified in the UsersController.php component of Run.codes version 1.5.2 and older. This issue involves a race condition in the password reset functionality, allowing an attacker to potentially reset a user's password before the intended account holder. This could result in unauthorized access or other malicious activities. Users are strongly advised to update to the latest version of Run.codes to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.