返回 CVE 瀏覽器

CVE-2023-42793

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-19

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Affected Platforms (CPE)

📦

Jetbrains

Teamcity

< 2023.05.4

References & Advisories

🔗 http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

🔗 https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793

🔗 https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/

🔗 https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/

🔗 https://www.sonarsource.com/blog/teamcity-vulnerability/

🔗 http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

相關資安分析文章

全球網絡威脅情報摘要：2026 年 7 月 24 日

本期情報聚焦於 Check Point CVE-2026-16232 SmartConsole 控制平面身分驗證繞過之主動利用、俄羅斯 LAUNDRY BEAR 利用 Zimbra 漏洞進行電子郵件間諜活動，以及假冒 Claude Desktop 的惡意廣告攻擊與 Chaos 勒索軟體運作動態。

相關漏洞威脅

CVE-2026-597968.1

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVE-2026-597958.1

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVE-2026-597947.3

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVE-2026-597938.8

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration