My Oracle Support Banner

Applicants Able To Upload File Types Exclude By File List Configured On URL For Resumes (Doc ID 2330441.1)

Last updated on NOVEMBER 22, 2017

Applies to:

PeopleSoft Enterprise HCM Candidate Gateway - Version 9.1 to 9.1 [Release 9]
Information in this document applies to any platform.


Applicants are able to upload "resumes" when applying for a job where the file extension is not in the file list that is configured on the URL used by this feature.

Applicants are able to upload resumes (or other file types) where the file extension is not in the file list configured on the URL
It is expected that Applicants should be able to upload only valid file types based on the list configured.

The issue can be reproduced at will with the following steps:
1. As Applicant, Apply for a job
2. Upload a resume with a file extension of .html/.exe or any other.
3. Note that it uploads properly.

The issue has the following business impact:
Due to this issue, the company cannot control file types applied in their environment.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.