{"id":"USN-2551-1","summary":"jakarta-taglibs-standard vulnerability","details":"David Jorm discovered that the Apache Standard Taglibs incorrectly handled\nexternal XML entities. A remote attacker could possibly use this issue to \nexecute arbitrary code or perform other external XML entity attacks.\n","modified":"2026-02-10T04:40:53Z","published":"2015-03-30T17:25:46Z","related":["UBUNTU-CVE-2015-0254"],"upstream":["CVE-2015-0254","UBUNTU-CVE-2015-0254"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-2551-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2015-0254"}],"affected":[{"package":{"name":"jakarta-taglibs-standard","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/jakarta-taglibs-standard@1.1.2-2ubuntu1.14.04.1?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.2-2ubuntu1.14.04.1"}]}],"versions":["1.1.2-2ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_version":"1.1.2-2ubuntu1.14.04.1","binary_name":"libjakarta-taglibs-standard-java"},{"binary_name":"libjstl1.1-java","binary_version":"1.1.2-2ubuntu1.14.04.1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2015-0254","severity":[{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:14.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2551-1.json"}}],"schema_version":"1.7.3"}