vendor:
TeamCity
by:
ByteHunter
6.1
CVSS
HIGH
Remote Code Execution (RCE)
94
CWE
Product Name: TeamCity
Affected Version From: 2023.05.03
Affected Version To: 2023.05.04
Patch Exists: YES
Related CWE: CVE-2023-42793
CPE: a:jetbrains:teamcity:2023.05.3
Platforms Tested:
2023
JetBrains TeamCity 2023.05.3 – Remote Code Execution (RCE)
The JetBrains TeamCity version 2023.05.3 is vulnerable to remote code execution (RCE) before version 2023.05.4. An attacker can exploit this vulnerability to create a TeamCity admin account. CVE-2023-42793 has been assigned to this vulnerability.
Mitigation:
To mitigate this vulnerability, it is recommended to update JetBrains TeamCity to version 2023.05.4 or later.