Sploitus

Exploit for Missing Authentication for Critical Function in Jetbrains Teamcity

githubexploit · 2024-04-21

Exploit Code

README14 lines
## https://sploitus.com/exploit?id=72754497-15AC-59B1-B5B4-5D06619DAA1F
# CVE-2023-42793
JetBrains TeamCity before 2023.05.4 is vulnerable to authentication bypass leading to RCE

# Usage
To get a reverse shell
```bash
python3 exploit.py   
```

# References
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
https://nvd.nist.gov/vuln/detail/cve-2023-42793