Information Disclosure

conga is vulnerable to information disclosure. An attacker is able to retrieve passwords from the source file of the web page as the passwords are found in the Value attribute of a password entry field.