CVE-2023-42793

CRITICAL

KEV

Ransomware

Exploit

설명

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Score Summary

CVSS Score: 9.8
Version: 3.1
Risk Score: 9.90
Attack Vector: 네트워크 공격
낮은 복잡도
권한 불필요
사용자 상호작용 불필요
범위 변경 없음
기밀성 영향 높음
무결성 영향 높음
가용성 영향 높음

Details

Published: 09/19/2023(3 years ago)
Modified: 10/24/2025(7 months ago)
Source: KEV, NVD
Products: 1

CISA KEV Listing

Ransomware

Vendor / Project: JetBrains
Product: TeamCity

Date Added: 10/04/2023
Due Date: 10/25/2023Overdue 936d

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Vulnerability Lifecycle

NVDPublished09/19/2023
CISA KEVKEV Listed10/04/2023
CISA KEV

CWE Weakness Classification

CWE-288
NVD
Secondary
CWE-306
NVD
Primary

References (9)

NVD
Exploit
https://www.sonarsource.com/blog/teamcity-vulnerability/
NVD
Exploit
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
NVD

Affected Products (1)

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

StatusAnalyzed

Due Date

10/25/2023

NVDLast Modified10/24/2025

Third Party Advisory

https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793

NVD

Advisory

https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/

NVD

Advisory

https://www.jetbrains.com/privacy-security/issues-fixed/

NVD

Third Party Advisory

https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/

NVD

https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/

NVD

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793

exploitdb

Exploit

https://www.exploit-db.com/exploits/51884

목록으로

Dashboard

Vulnerabilities