burakacar6/cve-2023-42793-teamcity-unauthenticated-rceA PoC and automated version detection/exploit tool for JetBrains TeamCity Authentication Bypass & RCE (CVE-2023-42793).
This repository provides a Python-based utility designed to assess and demonstrate the security implications of CVE-2023-42793, a critical vulnerability affecting on-premises JetBrains TeamCity servers.
The vulnerability exists within the handling of specific HTTP request paths in the TeamCity web application, allowing an unauthenticated remote attacker to bypass authentication mechanisms. This access enables the creation of administrative authentication tokens, modification of internal server properties (internal.properties), and subsequent invocation of debug endpoints to achieve arbitrary command execution on the host operating system.
check): Parses the server login page to detect the running TeamCity version and compares it against known vulnerable version thresholds.exploit): Demonstrates the chained impact by generating an administrative token, enabling the required process execution flags, and running authorized verification commands.check and exploit) via argparse.Ensure Python 3.8+ is installed on your system.
git clone https://github.com/burakacar6/CVE-2023-42793-TeamCity-Unauthenticated-RCE.git
cd CVE-2023-42793
pip install -r requiremenets.txt