Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2020/09/14 6:44 p.m.•87 views

XXE in Apache Standard Taglibs

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS8.6AI score0.12758EPSS
SaveExploits0References24Affected Software2
Veracode
Veracode
•added 2019/01/15 9:09 a.m.•41 views

XML External Entity (XXE) Through An XSLT Extension

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS8.3AI score0.12758EPSS
SaveExploits0References47Affected Software100
NVD
NVD
•added 2015/03/09 2:59 p.m.•27 views

CVE-2015-0254

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS9.6AI score0.12758EPSS
SaveExploits0References23
Prion
Prion
•added 2015/03/09 2:59 p.m.•32 views

Xxe

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS7.9AI score0.12758EPSS
SaveExploits0References23Affected Software2
Mend
Mend
•added 2015/03/09 2:00 p.m.•4 views

CVE-2015-0254

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS0.12758EPSS
SaveExploits0References32
Cvelist
Cvelist
•added 2015/03/09 2:00 p.m.•48 views

CVE-2015-0254

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

9.3AI score0.12758EPSS
SaveExploits0References23
UbuntuCve
UbuntuCve
•added 2015/03/09 12:00 a.m.•37 views

CVE-2015-0254

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS7AI score0.12758EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2015/03/09 12:00 a.m.•3 views

PT-2015-4545

Name of the Vulnerable Software and Affected Versions Apache Standard Taglibs versions prior to 1.2.3 Description The issue allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks. This can be achieved via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS0.12758EPSS
SaveExploits0References50
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/03/09 12:00 a.m.•5 views

CVE-2015-0254: Undefined Security Weakness

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

7.5CVSS7.7AI score0.12758EPSS
SaveExploits0References9
Rows per page
Query Builder