There is an "ext_ref" blank field that all users can see when creating a task. It shouldn't be there.
Also, in existing tasks with a value (those that were imported from lab) the field is editable! It shouldn't be either.
See https://secure.phabricator.com/T6114 for possible solutions