JetBrains TeamCity Unauthenticated Remote Code Execution

This Metasploit module exploits an authentication bypass vulnerability to achieve unauthenticated remote code execution against a vulnerable JetBrains TeamCity server. All versions of TeamCity prior to version 2023.05.4 are vulnerable to this issue. The vulnerability was originally discovered by SonarSource.

authentication authentication bypass bypass bypass vulnerability code code execution exploits issue jetbrains jetbrains teamcity metasploit remote code remote code execution server sonarsource teamcity unauthenticated version vulnerability vulnerable