MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-3579 - Vulnerability Database

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2019-3579

Medium

Reference: CVE-2019-3579

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-3579

Title: MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

Overview:

MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter.