WID-SEC-W-2023-2398

DeutschShown in its original language — a full translation is planned for a future version.

JetBrains TeamCity: Mehrere Schwachstellen

view advisory published 2023-09-19

Ein entfernter Angreifer kann mehrere Schwachstellen in JetBrains TeamCity ausnutzen, um beliebigen Programmcode auszuführen, administrative Rechte zu erlangen oder einen Cross Site Scripting Angriff durchzuführen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-43566US	medium5.4	1.05% (64th)	—	2023-09-19
In JetBrains TeamCity before 2023.05.4 stored XSS was possible during nodes configuration
CVE-2023-42793US	critical9.8OT critical	100.0% (100th)	KEV	2023-09-19
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

references

External citations — patches, advisories, analysis.

JetBrains Blog vom 2023-10-09external
WID-SEC-W-2023-2398 - CSAF Versionself
WID-SEC-2023-2398 - Portal Versionself
JetBrains fixed security issues vom 2023-09-19external
Sonar Security Research vom 2023-10-03external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan