Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-24619
5.9
MEDIUMCVSS v3
Published
September 22, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of setPeerVerifyMode(QSslSocket::VerifyNone). A man-in-the-middle attacker could offer a spoofed download resource.
GitHub