high8.8
CVE-2025-33015
IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
Impact
IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Concert | from 1.0.0 before 2.2.0 |