Apache Software Foundation Standard Taglibs vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Standard Taglibs: 1 record(s), with affected versions and fixes.
cpe:2.3:a:apache:standard_taglibs

CVE-2015-0254 High · 7.5 Mar 9, 2015

XXE in Apache Standard Taglibs

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.