Applicants Able To Upload File Types Exclude By File List Configured On URL For Resumes

(Doc ID 2330441.1)

Last updated on NOVEMBER 22, 2017

Applies to:

PeopleSoft Enterprise HCM Candidate Gateway - Version 9.1 to 9.1 [Release 9]
Information in this document applies to any platform.

Symptoms

Applicants are able to upload "resumes" when applying for a job where the file extension is not in the file list that is configured on the URL used by this feature.


ACTUAL BEHAVIOR
---------------
Applicants are able to upload resumes (or other file types) where the file extension is not in the file list configured on the URL
 
EXPECTED BEHAVIOR
---------------
It is expected that Applicants should be able to upload only valid file types based on the list configured.



STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. As Applicant, Apply for a job
2. Upload a resume with a file extension of .html/.exe or any other.
3. Note that it uploads properly.

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, the company cannot control file types applied in their environment.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms