CVE-2013-5036

CVE-2013-5036 describes a critical remote code execution vulnerability in Square Squash, specifically affecting the squash_squash product. Attackers can exploit this by injecting malicious YAML documents into the 'namespace' or 'sourcemap' parameters, leading to arbitrary code execution. With a CVSS score of 7.5 (High) and an EPSS score indicating high exploitability, this vulnerability allows unauthenticated attackers to achieve full system compromise with low attack complexity. While not on the KEV catalog or Hot List, a Metasploit module exists, confirming exploitability, though there is no evidence of active exploitation or significant community discussion.