Vulnerability Disclosure

Job&Talent Vulnerability disclosure:

This page is for security researchers interested in reporting application security vulnerabilities found in Job&Talent and its platforms. This is intended for application security vulnerabilities only. Job&Talent works collaboratively with researchers, and asset owners to address cybersecurity vulnerabilities affecting products, software, systems, and infrastructure.

Typical Vulnerabilities Accepted:

• OWASP Top 10 vulnerability categories
• Other vulnerabilities with demonstrated impact

Typical Out of Scope:

• Low impact session management issues
• Theoretical vulnerabilities
• Informational disclosure of non-sensitive data
• Self XSS (user defined payload)

Vulnerability Disclosure Guidelines:

• Provide detailed description of a proof of concept to detail reproduction of vulnerabilities
• Do not engage in disruptive testing like DoS or any action that could impact the confidentiality, integrity or availability of information and systems
• Do not engage in social engineering or phishing of customers or employees
• Job&Talent does not offer any compensation for vulnerability disclosures at the moment

Necessary Information for the Disclosure:

• Title
• Affected product/website
• Endpoint
• Vulnerable part
• Part name
• Payload
• Technical environment (OS, Browser, Tools, Version, etc)
• Details
• Optional fields:
  • Name of the reporter
  • Email of the reporter