Naukri.comA famous Indian recruitment site, which has fixed an error that displays the email addresses of employees using its search platform and employing talents online.
The problem, which was discovered by Lohith Gowda, affected the application programming interface that Naukri used in Android and iOS applications. Application programming interface has revealed email addresses for employees who visit potential candidates on the Naukri platform. The problem does not seem to affect the company’s website.
Juda told Techcrunch: “Open email identifiers can be used to recruit the targeted hunting attacks, and recruits may receive unwanted email messages,” Juda told Techcrunch.
He added that exposed email identifiers can be added to the general penetration databases or random mail lists, and the bullying of the comprehensive email address may lead to abuse of automatic bot or fraud.
TECHCRUNCH checks out after the researcher shared details about the error. The researcher confirmed to Techcrunch that the case had been repaired earlier this week, which has proven Naukri on Friday.
“All specific improvements are performed, ensuring that our systems are updated and flexible,” said Alok VIJ, the IT head of the Infoedge for Naukri, for Techcrunch via email. “Our teams have not discovered any usual activity that affects the safety of user data.”
Naukri.com was established in March 1997, a classified site in India, and helps to connect employees, employers and job seekers. Aside from India, the site is located in the Middle East like Naukrigulf.com.
“Some of our recruits profile features are designed to be public to enable users to know who has access to their files (their files). We make regular security audits and evaluations,” VIJ said.
