mltframework/shotcut

mltframework/shotcut

GitHubGitHub
GitHubgithub.com
www.shotcut.orgwww.shotcut.org
Releases215
Frequency3 weeks 22 hours
Last Release
Stars14.6K
cross-platform (Qt), open-source (GPLv3) video editor
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2020-24619NVD↗
< 20.09.135.9 MEDIUM4.3 MEDIUM

In mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of setPeerVerifyMode(QSslSocket::VerifyNone). A man-in-the-middle attacker could offer a spoofed download resource.