CVE-2013-5036
Square Squash - Remote Code Execution via YAML in Namespace or Sourcemap Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2013-5036.
PoCs published by Metasploit, Charlie Eriksen, including Metasploit module exploits/unix/webapp/squash_yaml_exec.
AI-analyzed exploit summary This Metasploit module exploits a YAML deserialization vulnerability in Squash, allowing remote code execution via crafted YAML payloads sent to the API endpoint. The exploit leverages Ruby's YAML parsing to execute arbitrary commands embedded in the payload.
Description
The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.
Exploits (2)
This Metasploit module exploits a YAML deserialization vulnerability in Squash, allowing remote code execution via crafted YAML payloads sent to the API endpoint. The exploit leverages Ruby's YAML parsing to execute arbitrary commands embedded in the payload.
This Metasploit module exploits a YAML deserialization vulnerability in Squash to achieve remote code execution. It crafts a malicious YAML payload containing base64-encoded Ruby code, which is then deflated and sent to the target endpoint.