IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-33015.json"