CVE-2025-11151 in CityPLus

Sumário

de MITRE • 21/10/2025

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.

This issue affects CityPLus: before V24.29500.1.0.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: TR-CERT
• Reservar: 29/09/2025
• Divulgação: 21/10/2025
• Moderação: aceite
• Entrada: VDB-329132
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 8.2 (CNA)
• EPSS: 0.00260
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-11151
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-11151
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-11151/