CVE-2025-11151 in CityPLus

Résumé

par MITRE • 21/10/2025

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.

This issue affects CityPLus: before V24.29500.1.0.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: TR-CERT
• Réserver: 29/09/2025
• Divulgation: 21/10/2025
• Modérer: accepté
• Entrée: VDB-329132
• CPE: prêt
• CWE: CWE-200 (confirmé)
• CVSS: 8.2 (CNA)
• EPSS: 0.00260
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-11151
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-11151
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-11151/