Lucene search
+L
SquashSquare Squash

1 matches found

CVE
CVE
added 2014/05/27 3:0 p.m.49 views

CVE-2013-5036

The CVE-2013-5036 issue pertains to Square Squash’s YAML processing, allowing remote code execution via a YAML document in (1) the namespace parameter to the deobfuscation function or (2) the sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb. Connected advisori...

7.5CVSS7.8AI score0.46182EPSS
SaveWeb