CVE-2020-1747

CVE-2020-1747 is a critical arbitrary code execution vulnerability in the PyYAML library, affecting versions prior to 5.3.1, as well as products like Fedora, OpenSUSE, and Oracle that utilize it. This flaw allows an unauthenticated attacker to execute arbitrary code on a system by crafting malicious YAML files and exploiting the full_load method or FullLoader. With a CVSS score of 9.8 (CRITICAL), it presents a severe risk with high impact on confidentiality, integrity, and availability, requiring no user interaction or complex attack conditions. While there is no evidence of active exploitation or public exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.