This vulnerability in CityPLus allows unauthorized actors to access sensitive system information by detecting unpublicized web pages, potentially exposing confidential data. It affects versions prior to V24.29500.1.0. The CVSS 3.1 base score is 8.2, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and high confidentiality impact but low integrity and no availability impact. No official patch or remediation details are currently provided, and the product is not a cloud service.

The vulnerability can lead to unauthorized disclosure of sensitive information, which may compromise confidentiality of the affected system. Although integrity and availability impacts are low or none, the exposure of sensitive data could facilitate further attacks or information leakage. No known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected CityPLus versions and limit exposure of unpublicized web pages where possible.