CVE-2020-14343

This repository contains a Flask web application demonstrating CVE-2020-14343, an insecure deserialization vulnerability in PyYAML leading to remote command execution. The PoC accepts base64-encoded YAML input and processes it using `yaml.load`, which can execute arbitrary code if malicious YAML is provided.

This PoC demonstrates CVE-2020-14343, a deserialization vulnerability in PyYAML where unsafe loading of YAML content can lead to arbitrary code execution. The exploit uses `yaml.UnsafeLoader` to execute the `whoami` command via a crafted YAML payload.

This repository contains a functional PoC for CVE-2020-14343, a PyYAML deserialization vulnerability allowing RCE via crafted YAML payloads. The exploit uploads a malicious YAML file to a target endpoint and triggers deserialization to achieve a reverse shell.