CVE-2019-15160

2019-08-1906:15:10

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.7%

JSON

The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.

CPENameOperatorVersion
sweet_xmleq0.4.0
sweet_xmleq0.1.1
sweet_xmleq0.6.3
sweet_xmleq0.6.5
sweet_xmleq0.6.0
sweet_xmleq0.6.4
sweet_xmleq0.3.0
sweet_xmleq0.5.1
sweet_xmleq0.2.0
sweet_xmleq0.2.1

Name	Operator	Version
sweet_xml	eq	0.4.0
sweet_xml	eq	0.1.1
sweet_xml	eq	0.6.3
sweet_xml	eq	0.6.5
sweet_xml	eq	0.6.0
sweet_xml	eq	0.6.4
sweet_xml	eq	0.3.0
sweet_xml	eq	0.5.1
sweet_xml	eq	0.2.0
sweet_xml	eq	0.2.1