lib/QoreSocket.cpp in Qore before 0.9.4.2 lacks hostname verification for X.509 certificates.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13615
Reference (s):
- https://github.com/qorelanguage/qore/compare/release-0.9.4.1 release-0.9.4.2
- https://github.com/qorelanguage/qore/issues/3808

