CVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

Published Sep 19, 2023 · updated Jun 16, 2026 · jetbrains teamcity

JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

Timeline

Detection, updates, and resolution for this record.

Sep 19, 2023 · Catalog
Detected
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
Oct 4, 2023 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Oct 25, 2023 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 16, 2026 · Catalog
Updated
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Oct 25, 2023

AttackerKBhttps://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
AttackerKB link already published on the finding.
attackerkb.com
CISA KEVCVE-2023-42793
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
cisa.gov
CVE.orgCVE-2023-42793
Official CVE identifier
cve.org
FIRST EPSSCVE-2023-42793
30-day exploitation probability 100.0%
first.org
Exploit Database51884
Public archive entry. The exploit body is not stored here.
exploit-db.com
Metasploit Modulesexploit_multi/http/jetbrains_teamcity_rce_cve_2023_42793
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com
NIST NVDCVE-2023-42793
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
nvd.nist.gov
Packet Storm Securityhttp://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
Packet Storm link already published on the finding.
packetstormsecurity.com