CVE-2020-7976: 
GitLab vulnerability analysis and mitigation

A security vulnerability was identified in GitLab Enterprise Edition (EE) versions 12.4 and later through 12.7.2, where the Grafana token was being displayed in plaintext on the settings page instead of being masked. This vulnerability was assigned CVE-2020-7976 and was disclosed on January 30, 2020 (GitLab Release).

The vulnerability involved the exposure of sensitive information where the Grafana token was displayed in plaintext format on the settings page of GitLab EE. This security issue has been addressed by implementing proper masking of the token in the latest release (GitLab Release).

The exposure of the Grafana token in plaintext could potentially allow unauthorized access to Grafana monitoring systems if the token was viewed by unauthorized users (GitLab Release).

The vulnerability was fixed in GitLab versions 12.7.4, 12.6.6, and 12.5.9. GitLab strongly recommended that all installations running affected versions should be upgraded to the latest version as soon as possible (GitLab Release).

The vulnerability was responsibly reported by security researcher @xanbanx, who was credited by GitLab in their security release announcement (GitLab Release).