CVE-2015-0254

CVE-2015-0254 describes a critical vulnerability in Apache Standard Taglibs before version 1.2.3, affecting Apache and Canonical Ubuntu Linux distributions. This flaw allows remote attackers to execute arbitrary code or conduct XML External Entity (XXE) attacks by injecting crafted XSLT extensions within JSTL XML tags like <x:parse> or <x:transform>. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for partial confidentiality, integrity, and availability impacts. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.