{"id":"CVE-2023-42793","aliases":[],"url":"https://o3.security/vulnerability/CVE-2023-42793","summary":"In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible","details":"In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible","published":"2023-09-19T16:57:29.245Z","modified":"2025-10-21T23:05:37.592Z","cvss":{"score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"epss":{"score":0.99979,"percentile":0.9998,"asOf":"2026-09-04"},"cisaKev":null,"exploitsKnown":10,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://www.jetbrains.com/privacy-security/issues-fixed/"},{"type":"WEB","url":"https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/"},{"type":"WEB","url":"http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html"},{"type":"WEB","url":"https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793"},{"type":"WEB","url":"https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/"},{"type":"WEB","url":"https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/"},{"type":"WEB","url":"https://www.sonarsource.com/blog/teamcity-vulnerability/"},{"type":"WEB","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2025-10-21T23:05:37.592Z"}}