CVE-2015-0254 XXE in Apache Standard Taglibs
HighCVSS 7.5
EPSS 12.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSLT extension in a (1) <x:parse> or (2) <x:transform> JSTL XML tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.apache.taglibs/taglibs-standard(Maven) | < 1.2.3 | 1.2.3 |
| org.apache.taglibs/taglibs-standard-impl(Maven) | < 1.2.3 | 1.2.3 |
| org.apache.taglibs/taglibs-standard(Maven) | = 1.2.1 | No fix listed |
| org.apache.taglibs/taglibs-standard-impl(Maven) | = 1.2.1 | No fix listed |
| apache standard taglibs | <= 1.2.1 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 14.10 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- RHSA-2016:1376 vendor-advisory
- lists.apache.org
- www.oracle.com
- openSUSE-SU-2015:1751 vendor-advisory
- [tomcat-taglibs-user] 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags mailing-list vendor-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- www.oracle.com
- 1034934 vdb-entry
- USN-2551-1 third-party-advisory vendor-advisory
- lists.apache.org
- lists.apache.org
- lists.apache.org
- RHSA-2015:1695 vendor-advisory
- RHSA-2016:1838 vendor-advisory
- RHSA-2016:1839 vendor-advisory
- RHSA-2016:1840 vendor-advisory
- RHSA-2016:1841 vendor-advisory
- 20150227 [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags mailing-list
- 72809 third-party-advisory vdb-entry
- lists.apache.org
- lists.apache.org
- lists.apache.org
- github.com
- [tomcat-dev] 20190319 svn commit: r1855831 [27/30] - in /tomcat/site/trunk: ./ docs/ xdocs/ mailing-list
- [tomcat-dev] 20190325 svn commit: r1856174 [26/29] - in /tomcat/site/trunk: docs/ xdocs/ xdocs/stylesheets/ mailing-list
- [tomcat-dev] 20200203 svn commit: r1873527 [27/30] - /tomcat/site/trunk/docs/ mailing-list
- [tomcat-dev] 20200213 svn commit: r1873980 [31/34] - /tomcat/site/trunk/docs/ mailing-list
- [portals-pluto-dev] 20210714 [jira] [Closed] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254 mailing-list
- [portals-pluto-scm] 20210714 [portals-pluto] branch master updated: PLUTO-792 Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254 mailing-list
- [portals-pluto-dev] 20210714 [jira] [Created] (PLUTO-792) Upgrade to taglibs-standard-impl-1.2.3 due to CVE-2015-0254 mailing-list
- www.oracle.com