CVE-2020-13615

MEDIUM 5.9CVE-2020-13615 · Published 26/05/2020 · updated 17/06/2026

In short

CVE-2020-13615 is a MEDIUM (CVSS 5.9) vulnerability affecting qore (qore).
Chance of exploitation in the next 30 days (EPSS): 0.75%, higher than 55.1% of all vulnerabilities.
Fix: update to 0.9.4.2 or later.

Package	Affected versions	Patched versions
qore qore	`< 0.9.4.2`	`0.9.4.2`

lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.