A bug in ref=”dofollow” data-ga-onclick=”Inarticle articleshow link click#Tech#href” target=”_blank” href=”https://economictimes.indiatimes.com/info-edge-india-ltd/stocks/companyid-18352.cms”>Naukri.com’s ref=”dofollow” data-ga-onclick=”Inarticle articleshow link click#Tech#href” href=”https://economictimes.indiatimes.com/topic/mobile-apps” target=”_blank”>mobile apps exposed the email addresses of recruiters using the platform to hire talent, according to a report by TechCrunch. The vulnerability has since been fixed.
Security researcher ref=”dofollow” data-ga-onclick=”Inarticle articleshow link click#Tech#href” href=”https://economictimes.indiatimes.com/topic/lohith-gowda” target=”_blank”>Lohith Gowda, who discovered the issue, said it was caused by a flaw in the ref=”dofollow” data-ga-onclick=”Inarticle articleshow link click#Tech#href” href=”https://economictimes.indiatimes.com/topic/api” target=”_blank”>API used by Naukri’s Android and iOS apps. The bug exposed recruiter email IDs when they viewed candidate profiles. The web version of Naukri.com was unaffected.
“The exposed recruiter email IDs can be used for targeted phishing attacks, and recruiters may receive…
