Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.
simplehttpserver project simplehttpserver