A critical path traversal vulnerability in MontFerret Ferret allows unauthenticated attackers to write arbitrary files to the host filesystem, posing a significant risk of remote code execution.

This is a path traversal flaw (CWE-22) in the IO::FS::WRITE function. An unauthenticated attacker can exploit this when an operator scrapes a malicious website that returns filenames containing directory traversal sequences, enabling arbitrary file creation or modification on the host system.

The ability to write arbitrary files to the filesystem poses a severe threat to system integrity and confidentiality. By overwriting configuration files, shell profiles, or SSH keys, an attacker can achieve remote code execution, leading to full system compromise. With a CVSS score of 8.1, this vulnerability represents a high-severity risk that could result in significant data loss or unauthorized access to internal infrastructure.

Immediate Action: Upgrade the MontFerret Ferret library to version 2.0.0-alpha.4 or later immediately to resolve the vulnerable IO::FS::WRITE function.

Proactive Monitoring: Review system logs for unusual file write operations, particularly those involving directory traversal sequences or attempts to modify sensitive system files like cron jobs or SSH keys.

Compensating Controls: Implement strict input validation on all scraped data before processing filenames and restrict the permissions of the user account running the Ferret process to the minimum level necessary to prevent unauthorized file system modifications.

Public Exploit Available: Unknown.

This vulnerability presents a high risk of remote code execution due to the ease with which a malicious website can trigger the flaw during standard operations. Organizations utilizing Ferret must prioritize the update to version 2.0.0-alpha.4 to mitigate this exposure. If an immediate update is not feasible, ensure that all scraping activities are performed in highly isolated environments with restricted file system access.