Postgres Admin Username and Password in Plain text

How it was found

Summary:

Gitlab commit contains password in plain text

Steps To Reproduce:

Navigate to https://gitlab.com/upchieve/subway/-/commit/e0e039496321c9d62a591504d387589224660a5c

Supporting Material/References:

Recommendations for Fixing/Mitigation

Do not disclose passwords in gitlab. Implement a check that prevents developers from uploading passwords in plain text. Use secure passwords.

Impact

An attacker can login to the Postgres DB with admin privileges