VULNERABILITY INTELLIGENCE

CVE-2019-15160

CVSS score7.5 HIGH

EPSS probability1.67%

CISA KEVNot currently listed

Published2019-08-19

Last modified2026-06-17

Description

The SweetXml (aka sweet_xml) package through 0.6.6 for Erlang and Elixir allows attackers to cause a denial of service (resource consumption) via an XML entity expansion attack with an inline DTD.