CVE-2019-3579

2019-06-0618:11:32

mitre

www.cve.org

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter.

References

blog.mybb.com/

blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/