CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')