CVE-2024-23917

—

CVSS 3.1

9.8 critical

EPSS

54%p99

Published

Feb 6, 2024 (Feb 6, 2024)

Modified

Jun 17, 2026

Description

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

Vendors: jetbrains
Products: teamcity
Weakness: CWE-288, CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (53.7%)

In the news8 stories

Threat actors actively exploit JetBrains TeamCity flaws to deliver malware

Security AffairsMar 20, 15:06 UTC · Mar 20, 2024Malware in the wildCVE-2024-27198 CVE-2024-27199 CVE-2024-23917

60

Experts disclosed two flaws in JetBrains TeamCity On

Security AffairsMar 5, 08:19 UTC · Mar 5, 2024Vulnerability CVE-2024-27198 CVE-2024-27199 CVE-2024-23917

60

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

The Hacker NewsMar 5, 03:34 UTC · Mar 5, 2024Vulnerability in the wildCVE-2024-27198 CVE-2024-27199 CVE-2024-23917

60

On-premises JetBrains TeamCity servers vulnerable to auth bypass (CVE-2024-23917)

Help Net SecurityFeb 15, 11:49 UTC · Feb 15, 2024Vulnerability CVE-2024-23917 CVE-2023-42793

60

Week in review: 10 must-read cybersecurity books, AnyDesk hack, Patch Tuesday forecast

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2024Vulnerability CVE-2024-23832 CVE-2024-21893 CVE-2024-23917

60

Patched Critical Flaw Exposed JetBrains TeamCity Servers

Infosecurity MagazineFeb 7, 17:00 UTC · Feb 7, 2024Vulnerability in the wildCVE-2024-23917 CVE-2023-42793

60

Experts warn of critical JetBrains TeamCity On

Security AffairsFeb 7, 15:13 UTC · Feb 7, 2024Vulnerability CVE-2024-23917 CVE-2023-42793

60

Critical JetBrains TeamCity On-Premises Flaw Exposes Servers to Takeover

The Hacker NewsFeb 7, 05:05 UTC · Feb 7, 2024Ransomware in the wildCVE-2024-23917 CVE-2023-42793

60