{"id":"CVE-2025-11151","state":"PUBLISHED","title":"Information Disclosure in Beyaz Computer's CityPLus","description":"Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.\n\nThis issue affects CityPLus: before V24.29500.1.0.","publishedAt":"2025-10-21T13:15:39.524Z","updatedAt":"2026-06-04T19:42:25.194Z","severity":{"score":8.2,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","source":"TR-CERT"},"assigner":"TR-CERT","products":["Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus"],"affected":[{"vendor":"Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co.","product":"CityPLus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V24.29500.1.0","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-25-0351","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0351"],"weaknesses":["CWE-200","CWE-497"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/11xxx/CVE-2025-11151.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-11151","state":"PUBLISHED","datePublished":"2025-10-21T13:15:39.524Z","dateUpdated":"2026-06-04T19:42:25.194Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-09-29T10:54:50.571Z"},"containers":{"cna":{"title":"Information Disclosure in Beyaz Computer's CityPLus","descriptions":[{"lang":"en","value":"Exposure of Sensitive Information to an Unauthorized Actor, Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co. CityPLus allows Detect Unpublicized Web Pages.\n\nThis issue affects CityPLus: before V24.29500.1.0."}],"affected":[{"vendor":"Beyaz Bilgisayar Software Design Industry and Trade Ltd. Co.","product":"CityPLus","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V24.29500.1.0","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-25-0351","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0351","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"LOW","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":8.2,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","lang":"en","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-497","lang":"en","description":"CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-04T19:42:25.194Z"},"datePublic":"2025-10-21T12:10:00.000Z","impacts":[{"capecId":"CAPEC-143","descriptions":[{"lang":"en","value":"CAPEC-143 Detect Unpublicized Web Pages"}]}],"credits":[{"lang":"en","value":"Aleyna KABAL","type":"finder"}],"source":{"defect":["TR-25-0351"],"advisory":"TR-25-0351","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-10-21T13:41:11.361615Z","id":"CVE-2025-11151","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-10-21T14:08:10.192Z"}}]}}}