### [CVE-2017-1002157](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1002157)
![](https://img.shields.io/static/v1?label=Product&message=modulemd&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%3D%201.3.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-242&color=brighgreen)

### Description

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon