Security Advisory
CVE-2015-0254
7.5
Vulnerability Description
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) or (2) JSTL XML tag.
Published Date
March 9, 2015
Official Source
NIST NVD Advisory