CVE-2025-57633

The FTP-Flask-python library (versions through 5173b68 ) contains a command injection vulnerability. The root cause is the lack of sanitization or escaping on the ftp_file parameter within the /ftp.html endpoint's "Upload File" action, which is then executed using os.system(). This allows unauthe...