Summary: MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter.Published: Thursday, June 6, 2019 - 15:29cvss: