What’s Vulnerable › Vulnerabilities
CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: yes — in CISA KEV since 2023-10-04
- EPSS: 100.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2023-09-19 · updated 2026-06-17
- Weakness: CWE-288
Description
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Summary
JetBrains TeamCity before 2023.05.4 contains an authentication bypass that can lead to remote code execution on the TeamCity Server. Rated CVSS 9.8 critical, it is listed in CISA's Known Exploited Vulnerabilities catalog with active exploitation, a public exploit, and a 100.0% EPSS 30-day exploitation probability. All TeamCity Server instances below 2023.05.4 are affected. Upgrade to 2023.05.4 or later, or apply the vendor's mitigations immediately; discontinue use if mitigations are unavailable.
تحتوي JetBrains TeamCity قبل الإصدار 2023.05.4 على ثغرة تجاوز للمصادقة قد تؤدي إلى تنفيذ تعليمات برمجية عن بُعد على خادم TeamCity. صُنّفت بدرجة 9.8 حرجة، وهي مدرجة في كتالوج CISA للثغرات المعروفة بالاستغلال مع استغلال نشط، ووجود أداة استغلال عامة، واحتمال استغلال بنسبة 100.0% خلال 30 يومًا وفق EPSS. تتأثر جميع نسخ TeamCity Server الأقدم من 2023.05.4. يجب الترقية إلى 2023.05.4 أو أحدث، أو تطبيق إجراءات التخفيف من المورّد فورًا، والتوقف عن استخدام المنتج إذا لم تتوفر إجراءات التخفيف.
Affected products
- JetBrains TeamCity: before 2023.05.4 — fixed in 2023.05.4
How to fix
Upgrade to a fixed version: JetBrains TeamCity 2023.05.4. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
- https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
- https://www.jetbrains.com/privacy-security/issues-fixed/
- https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/
- https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/
- https://www.sonarsource.com/blog/teamcity-vulnerability/
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
- https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
- https://www.jetbrains.com/privacy-security/issues-fixed/
- https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/
Get alerted when CVE-2023-42793 or the next vulnerability affects your stack