Cloud Cycling Android APP has arbitrary password reset vulnerability

Cloud Bike Android App is a transportation navigation app. An arbitrary password reset vulnerability exists in the password recovery function of Cloud Bike Android APP. An attacker can reset another person's password by simply using their cell phone number...