CVE-2023-42793criticalunder attackransomwareCWE-288

CVE-2023-42793: critical vulnerability in JetBrains TeamCity

Published · Updated

Follow this CVE+ Monitor TeamCity

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon10 days
Published on NVDSep 19
1st PoC+10d
metasploitSep 19
CISA KEV+15d
Action required by CISAfederal deadline: 2023-10-25

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

TeamCity versions before 2023.05.4 have a flaw that allows attackers to bypass login authentication and gain full control of the server, potentially executing any code they want.

Technical detail

Authentication bypass vulnerability (CWE-288) in TeamCity Server enables unauthenticated remote code execution. The flaw permits attackers to circumvent credential validation mechanisms and achieve arbitrary command execution with server privileges, requiring only network access to the affected instance.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
JetBrains · TeamCity
public PoCs found — 38
exploitdbwww.exploit-db.com/exploits/51884unverifiedgithubgithub.com/H454NSec/CVE-2023-42793★ 45githubgithub.com/B4l3rI0n/CVE-2023-42793★ 11githubgithub.com/Zenmovie/CVE-2023-42793★ 9githubgithub.com/hotplugin0x01/CVE-2023-42793★ 2githubgithub.com/junnythemarksman/CVE-2023-42793★ 1githubgithub.com/SwiftSecur/teamcity-exploit-cve-2023-42793★ 1githubgithub.com/syaifulandy/Nuclei-Template-CVE-2023-42793.yaml★ 1githubgithub.com/hhesenjan/CVE-2023-42793★ 1githubgithub.com/HusenjanDev/CVE-2023-42793★ 1githubgithub.com/johnossawy/CVE-2023-42793_POC★ 0githubgithub.com/whoamins/CVE-2023-42793★ 0githubgithub.com/becrevex/CVE-2023-42793★ 0githubgithub.com/jakehomb/cve-2023-42793★ 0githubgithub.com/DDestinys/CVE-2023-42793★ 0githubgithub.com/syorik/CVE-2023-42793★ 0githubgithub.com/StanleyJobsonAU/GhostTown★ 0githubgithub.com/cxdxnt/CVE-2023-42793★ 0githubgithub.com/FlojBoj/CVE-2023-42793★ 0githubgithub.com/burakacar6/CVE-2023-42793-TeamCity-Unauthenticated-RCE★ 0vulncheckvulncheck.com/xdb/183c21c8eac0unverifiedvulncheckvulncheck.com/xdb/5559dd30ebb6unverifiedvulncheckvulncheck.com/xdb/cd1c718f6e87unverifiedvulncheckvulncheck.com/xdb/ee24de727fe4unverifiedvulncheckvulncheck.com/xdb/8adc4eabd25aunverifiedvulncheckvulncheck.com/xdb/9b0f25203e7aunverifiedvulncheckvulncheck.com/xdb/c3ff544301c1unverifiedvulncheckvulncheck.com/xdb/10fd4d91a094unverifiedvulncheckvulncheck.com/xdb/0bad07d29b7funverifiedvulncheckvulncheck.com/xdb/934bc956f553unverifiedvulncheckvulncheck.com/xdb/4a3db2dbc4c2unverifiedvulncheckvulncheck.com/xdb/5e4deb6fe264unverifiedvulncheckvulncheck.com/xdb/bc5a2b0e1d27unverifiedvulncheckvulncheck.com/xdb/8dd662785c6bunverifiedvulncheckvulncheck.com/xdb/91c4204d110cunverifiedvulncheckvulncheck.com/xdb/dd3d65934799unverifiedcve_referencepacketstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/957c6f990b56unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — JetBrains TeamCity

In the same product, most dangerous first.

CVE-2024-27199HIGHCVE-2024-27199EPSS 100.0%KEVCVE-2024-27198CRITICALCVE-2024-27198EPSS 99.9%KEVCVE-2026-63077CRITICALCVE-2026-63077EPSS 94.9%KEVCVE-2024-31138MEDIUMCVE-2024-31138EPSS 74.7%CVE-2022-48428MEDIUMCVE-2022-48428EPSS 68.0%CVE-2025-46618LOWCVE-2025-46618EPSS 63.0%