Code injection

2019-08-1906:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.7%

JSON

The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.

CPENameOperatorVersion
sweet_xmlle0.6.6

CPE	Name	Operator	Version
	sweet_xml	le	0.6.6

References

github.com/kbrw/sweet_xml/issues/71

hex.pm/packages/sweet_xml

0.001 Low

EPSS

Percentile

45.7%

JSON

Related for PRION:CVE-2019-15160