CVE-2019-15160
The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.
CVSS 3.0 · 7.5 High
EPSS 1.7%
KEV · Not listed
Vendors
Products