CVE-2024-31552

CuteHttpFileServer v.3.1 version has an arbitrary file download vulnerability, which allows attackers to download arbitrary files on the server and obtain sensitive information...

CVE-2024-31552

CuteHttpFileServer version v.3.1 is susceptible to an arbitrary file download vulnerability. This flaw stems from an improper limitation of a pathname to a restricted directory , which allows an attacker to download arbitrary files from the server. Successful exploitation can lead to the disclosu...