Security Focus Bugtraq: [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags February 27, 2015 007admin Leave a comment [SECURITY] CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags