CVE-2015-0254
09.03.2015, 14:59
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apache | standard_taglibs | 𝑥 ≤ 1.2.1 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
𝑥
= Vulnerable software versions
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| jakarta-taglibs-standard |
| ||||||||||||
| jakarta-taglibs-standard-javadoc |
|
Red Hat Enterprise Linux Releases
References