Vulnerability · Published Oct 21, 2025 · Assigned by TR-CERT

CVE-2025-11151Information Disclosure in Beyaz Computer's CityPLus

High 8.2

In plain English

A high-severity information exposure in CityPLus from Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.3%top 79.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages. This issue affects CityPLus: before V24.29500.1.0.

Affected products (as reported)

Vendor	Product	Versions
Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co.	CityPLus	0 – before V24.29500.1.0

Weakness: CWE-200, CWE-497 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

https://www.usom.gov.tr/bildirim/tr-25-0351 government-resource, broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0351 government-resource