Physical Address

304 North Cardinal St.
Dorchester Center, MA 02124

Naukri exposed recruiter email addresses, researcher says


Naukri.comA popular Indian employment website has made an error that exposes employers’ emails using the platform to seek and hire talent.

The issue found by the Security Researcher Lohit Gowda affected Naukri’s API used by Android and iOS applications. API exposed the e-mail addresses of employers who visited the profiles of potential candidates on the NAKRI platform. The issue did not appear affected by the company’s website.

“The opening employer can be used for targeted fishing attacks and hiring employers can get excessive unwanted emails and spambots,” Techcrunch.

Added that exposed e-mail identifies can be added to public violations or spam lists and the mass email address can cause automated bot abuse or scammers.

Techcrunch confirmed exposure after sharing the researcher’s error. The researcher confirmed that Naukri was established early this week, approved by Friday.

“All identified accessories are implemented, ensure that our systems remain updated and firm,” he said. “Our teams did not reveal any ordinary activities that affect the integrity of the user.”

Founded in March 1997, NAUKRI.com is the best classified recruitment recruitment website, employers, employers and job seekers help. In addition to India, the site is available in the Middle East with Naukrigulf.com.

“RECruiter has been prepared for the public to ensure that the specific features of our profiles have access to the profiles of users.



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *