Missing input masking in GitLab CE/EE affecting all versions starting from 1.0.2 before 14.8.6, all versions from 14.9.0 before 14.9.4, and all versions from 14.10.0 before 14.10.1 causes potentially sensitive integration properties to be disclosed in the web interface
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gitlab | Gitlab | 1.0.2 (including) | 14.8.6 (excluding) |
| Gitlab | Gitlab | 14.9.0 (including) | 14.9.4 (excluding) |
| Gitlab | Gitlab | 14.10.0 (including) | 14.10.0 (including) |