{"id":"UBUNTU-CVE-2015-0254","details":"Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) \u003cx:parse\u003e or (2) \u003cx:transform\u003e JSTL XML tag.","modified":"2026-02-04T03:51:35.630280Z","published":"2015-03-09T00:00:00Z","related":["USN-2551-1"],"upstream":["CVE-2015-0254"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-0254"},{"type":"REPORT","url":"http://www.securityfocus.com/archive/1/534772"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-2551-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2015-0254"}],"affected":[{"package":{"name":"jakarta-taglibs-standard","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/jakarta-taglibs-standard@1.1.2-2ubuntu1.14.04.1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-2ubuntu1.14.04.1"}]}],"versions":["1.1.2-2ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"1.1.2-2ubuntu1.14.04.1","binary_name":"libjakarta-taglibs-standard-java"},{"binary_name":"libjstl1.1-java","binary_version":"1.1.2-2ubuntu1.14.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-0254.json"}},{"package":{"name":"jakarta-taglibs-standard","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/jakarta-taglibs-standard@1.1.2-3ubuntu1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-3ubuntu1"}]}],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libjakarta-taglibs-standard-java","binary_version":"1.1.2-3ubuntu1"},{"binary_name":"libjstl1.1-java","binary_version":"1.1.2-3ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2015/UBUNTU-CVE-2015-0254.json"}}],"schema_version":"1.7.3","severity":[{"type":"Ubuntu","score":"medium"}]}