CVE-2013-5036

Name of the Vulnerable Software and Affected Versions The Square Squash (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code. This can be achieved via a YAML document in two parameters: the namespace parameter to the deobfuscation function or the sourcemap parameter to the sourcemap function, both located in the app/controllers/api/v1 controller.rb file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.