Lucene search
HistoryMay 27, 2014 - 3:00 p.m.
CVE-2013-5036
cve-2013-5036
square squash
remote code execution
yaml
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.919 High
EPSS
Percentile
98.9%
The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.
Affected configurations
Node
squashsquare_squashMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| squash:square_squash | squash square squash | eq | - |
Related
zdt
zdt
Squash YAML Code Execution Vulnerability
2013-08-09 00:00:00
prion
prion
Deserialization of untrusted data
2014-05-27 14:55:00
packetstorm
packetstorm
Squash YAML Code Execution
2013-08-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Squash YAML Code Execution (CVE-2013-5036)
2016-10-18 00:00:00
cvelist
cvelist
CVE-2013-5036
2014-05-27 15:00:00
nvd
nvd
CVE-2013-5036
2014-05-27 14:55:10
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.919 High
EPSS
Percentile
98.9%
Related for CVE-2013-5036