CVE-2025-52024

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services,...

CVE-2025-52024: Missing Authentication for Critical Function

A vulnerability exists in the Aptsys POS Platform Web Services module thru 2025-05-28, which exposes internal API testing tools to unauthenticated users. By accessing specific URLs, an attacker is presented with a directory-style index listing all available backend services and POS web services,...

CVE-2025-52024

The Aptsys POS Platform Web Services module (versions prior to 2025-05-29 ) contains a vulnerability where internal API testing tools are exposed to unauthenticated users in production environments. By accessing specific URLs, an attacker can view a directory-style index of backend services and u...