CVEブラウザに戻る

CVE-2023-42793

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-19

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Affected Platforms (CPE)

📦

Jetbrains

Teamcity

< 2023.05.4

References & Advisories

🔗 http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

🔗 https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793

🔗 https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/

🔗 https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/

🔗 https://www.sonarsource.com/blog/teamcity-vulnerability/

🔗 http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

関連するセキュリティ記事

グローバル・サイバーインテリジェンス・ダイジェスト：2026年7月24日

本号では、Check Point CVE-2026-16232 SmartConsole 認証回避の悪用状況、ロシア背景の LAUNDRY BEAR による Zimbra 脆弱性攻撃、偽 Claude Desktop 悪意広告キャンペーン、および Chaos ランサムウェアの最新動向を分析します。

関連する脆弱性情報

CVE-2026-597968.1

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVE-2026-597958.1

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVE-2026-597947.3

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVE-2026-597938.8

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration