gray-mueller / gray-mueller/open-source-delivery-app

Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page

Open Beginner friendly
#238 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.

Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.

Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.

Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.

image

Contributor guide

Open the contributing guide

Research direction

Start by locating the Enatega Multivendor Admin Dashboard login page and its password input. Reproduce the issue with valid credentials, then verify the input configuration and test the page manually. Done means entered password characters are masked rather than displayed in plain text.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, frontend, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.