CVE-2023-42793
JetBrains TeamCity Authentication Bypass Vulnerability
- Published
- Sep 19, 2023
- Updated
- Oct 21, 2025
- Assigning CNA
- JetBrains
- Evidence observed
- Oct 4, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HHigh · next 30 days
- Percentile
- 100.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Sources
teamcity/CVE-2023-42793
Jetbrains TeamCity Authentication Bypass and Remote Command Execution (CVE-2023-42793)
Vulhub vulnerability labsDeclared conditions
- lab image version: vulhub/teamcity:2023.05.3(teamcity/CVE-2023-42793/docker-compose.yml:services.web.image)
modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb
Metasploit Framework modulesDeclared conditions
- platform: Linux,Windows($.exploit_multi/http/jetbrains_teamcity_rce_cve_2023_42793.platform)
- verification: check_declared($.exploit_multi/http/jetbrains_teamcity_rce_cve_2023_42793.check)
http/cves/2023/CVE-2023-42793.yaml
Nuclei TemplatesDeclared conditions
- network: http($.protocol_keys)
- verification: word($.matchers[*].type)
- CVE-2023-42793Exploit
JetBrains TeamCity 2023.05.3 - Remote Code Execution (RCE), CVE-2023-42793
- CVE-2023-42793Exploit
TeamCity server scanner to detect CVE-2023-42793
A PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793).
- CVE-2023-42793Exploit
Exploit for TeamCity CVE-2023-42793 enabling remote code execution and administrator account creation via token-based authentication bypass.
- CVE-2023-42793Scanner
Batch vulnerability scanner for CVE-2023-42793 targeting JetBrains TeamCity servers. Automates credential extraction and login URL discovery across multiple hosts.
- CVE-2023-42793Exploit
TeamCity CVE-2023-42793 RCE (Remote Code Execution)
- CVE-2023-42793Exploit
JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit
JetBrains TeamCity Unauthenticated Remote Code Execution - Python3 POC
- CVE-2023-42793_POCExploit
Automated exploit script for CVE-2023-42793 targeting TeamCity, enabling token manipulation and admin user creation for penetration testing.
teamcity-exploit-cve-2023-42793
- CVE-2023-42793Exploit
Python exploit for CVE-2023-42793 that achieves remote code execution on TeamCity Linux servers by encoding a payload in a URL and sending it to the target.
Proof-of-concept exploit for CVE-2023-42793, a critical authentication bypass vulnerability in JetBrains TeamCity leading to remote code execution.
- CVE-2023-42793Exploit
TeamCity CVE-2023-42793 exploit written in Rust
- GhostTownPoC
Proof of Concept script to exploit CVE-2023-42793 (TeamCity)
- Nuclei-Template-CVE-2023-42793.yamlDetection
Windows & linux support
Proof-of-concept exploit for CVE-2023-42793, targeting a specific web application vulnerability to demonstrate exploitation and aid in security assessments.
- CVE-2023-42793Exploit
PoC of CVE-2023-42793
ByteHunter · java · Mar 14, 2024
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.