CVE-2020-14343
CRITICALPyYAML < 5.4 - Remote Code Execution via Python Object Constructor
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-14343. PoCs published by j4k0m, sijie52, Kairo-one.
AI-analyzed exploit summary This repository contains a Flask web application demonstrating CVE-2020-14343, an insecure deserialization vulnerability in PyYAML leading to remote command execution. The PoC accepts base64-encoded YAML input and processes it using `yaml.load`, which can execute arbitrary code if malicious YAML is provided.
Description
A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
Exploits (3)
This repository contains a Flask web application demonstrating CVE-2020-14343, an insecure deserialization vulnerability in PyYAML leading to remote command execution. The PoC accepts base64-encoded YAML input and processes it using `yaml.load`, which can execute arbitrary code if malicious YAML is provided.
This PoC demonstrates CVE-2020-14343, a deserialization vulnerability in PyYAML where unsafe loading of YAML content can lead to arbitrary code execution. The exploit uses `yaml.UnsafeLoader` to execute the `whoami` command via a crafted YAML payload.
This repository contains a functional PoC for CVE-2020-14343, a PyYAML deserialization vulnerability allowing RCE via crafted YAML payloads. The exploit uploads a malicious YAML file to a target endpoint and triggers deserialization to achieve a reverse shell.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H