Search found 2 matches
- Mon Feb 03, 2020 10:19 am
- Forum: Bullhorn APIs
- Topic: Potential security issue with file endpoint
- Replies: 0
- Views: 3016
Potential security issue with file endpoint
Hi, I have noticed that GET file endpoint can retrieve any file even if candidate id and file id do not match. Can someone confirm me if this in on purpose? Why we need to enter candidate id if we can retrieve file with just file id? http://bullhorn.github.io/rest-api-docs/#get-file . Example: curl ...
- Thu Jan 09, 2020 5:13 am
- Forum: Bullhorn APIs
- Topic: GET file - BUG
- Replies: 0
- Views: 2693
GET file - BUG
Hi, I'm making GET request to: eg. https://rest.bullhornstaffing.com/rest-services/e999/file/Candidate/3835/231 I have noticed that if I enter file ID from other candidate I will get file from that other candidate, despite the fact that client ID do not match. Please let me know if this is a BUG or ...