Information Exposure Vulnerability in CityPLus by Beyaz Bilgisayar Software Design
CVE-2025-11151

8.2HIGH

Key Information:

Vendor

Beyaz Bilgisayar Software Design Industry And Trade Ltd. Co.

Status
Cityplus
Vendor
CVE Published:
21 October 2025

What is CVE-2025-11151?

A security vulnerability in CityPLus permits unauthorized access to sensitive information, potentially allowing actors to detect and interact with web pages that are not publicly accessible. This exposure, affecting versions prior to V24.29500.1.0, can lead to serious privacy concerns and potential data breaches for users of Beyaz Bilgisayar's software.

Affected Version(s)

CityPLus 0

References

https://www.usom.gov.tr/bildirim/tr-25-0351

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Aleyna KABAL
JSON
.
CVE-2025-11151 : Information Exposure Vulnerability in CityPLus by Beyaz Bilgisayar Software Design