Metasploit Weekly Wrap-Up

TeamCity authentication bypass and remote code execution

This week’s Metasploit release includes a new module for a critical authentication bypass in JetBrains TeamCity CI/CD Server. All versions of TeamCity prior to version 2023.05.4 are vulnerable to this issue. The vulnerability was originally discovered by SonarSource, and

authentication authentication bypass bypass code code execution critical issue jetbrains jetbrains teamcity metasploit metasploit weekly wrapup release remote code remote code execution server sonarsource teamcity version vulnerability vulnerable week weekly wrap-up