gray-mueller / gray-mueller/restaurant-online-ordering-app-using-java
Password Field Visibility in Enatega Multivendor Admin Dashboard Login Page
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Description:
Upon accessing the Enatega Multivendor Admin Dashboard login page, I observed that when entering the password, the input is not being hidden, compromising the security of user credentials. This poses a potential security risk as sensitive information is visible to onlookers.
Steps to Reproduce:
Open the Enatega Multivendor Admin Dashboard login page.
Enter valid credentials in the respective fields.
Observe that the password entered is not masked or hidden.
Expected Behavior:
The password field should hide the entered characters, displaying them as asterisks or dots, to ensure the confidentiality and security of user passwords.
Actual Behavior:
The password entered in the login page is visible in plain text, raising security concerns.
image
Contributor guide
Assessment
This issue has not been assessed yet.