CVE-2023-42793

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

• CWE-288
• CWE-306

• http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793Third Party Advisory
• https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/Vendor Advisory
• https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory
• https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/Broken Link, Third Party Advisory
• https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/Press/Media Coverage
• https://www.sonarsource.com/blog/teamcity-vulnerability/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793Third Party Advisory
• https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/Vendor Advisory
• https://www.jetbrains.com/privacy-security/issues-fixed/Vendor Advisory
• https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/Broken Link, Third Party Advisory
• https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/Press/Media Coverage
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793US Government Resource

Published

Sep 19, 2023

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42788An improper neutralization of special elements used in an os…6.7
• CVE-2023-42789A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.…9.8
• CVE-2023-4279This User Activity Log WordPress plugin before 1.6.7 retriev…7.5
• CVE-2023-42790A stack-based buffer overflow vulnerability in Fortinet Fort…8.1
• CVE-2023-42791A relative path traversal in Fortinet FortiManager version 7…8.8
• CVE-2023-42792Apache Airflow, in versions prior to 2.7.2, contains a secur…6.5
• CVE-2023-42794Incomplete Cleanup vulnerability in Apache Tomcat. The inte…5.9
• CVE-2023-42795Incomplete Cleanup vulnerability in Apache Tomcat.When recyc…5.3
• CVE-2023-42796A vulnerability has been identified in CP-8031 MASTER MODULE…8.8
• CVE-2023-42797A vulnerability has been identified in CP-8031 MASTER MODULE…7.2
• CVE-2023-42798AutomataCI is a template git repository equipped with a nati…9.1
• CVE-2023-42799Moonlight-common-c contains the core GameStream client code …8.8