Dec 13, 2023

Updated

• Closed✓Patched

  TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793)

  An authentication bypass in JetBrains TeamCity On-Premises gave unauthenticated attackers remote code execution on the CI server. Microsoft saw two North Korean groups exploit it, and US and allied agencies later said Russia's SVR (APT29) mass-exploited it. That's a direct path into build pipelines.

  JetBrains TeamCity On-Premises·Closed Dec 13, 2023·updated Dec 13, 2023