Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-3740

24
FAUCET Score

CVE-2018-3740 describes a vulnerability in the Sanitize gem for Ruby, where a specially crafted HTML fragment can bypass the sanitization process, allowing non-whitelisted attributes on whitelisted HTML elements. This vulnerability carries a high CVSS score of 7.5, indicating a significant risk due to its network-based attack vector and low attack complexity, potentially leading to high integrity impact. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. While community discussion and media coverage are minimal, GitLab did issue a security release addressing this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
<= 4.6.0CPE matchmatch criteria
cpe:2.3:a:sanitize_project:sanitize:*:*:*:*:*:ruby:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.52%
Probability of exploitation in next 30 days
EPSS Percentile
72.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0152 is in the 54th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

github_advisorypatch availablevia nvd_reference
View patch
rubygemspatch availablevia ghsa
Product: sanitizeFixed in: 4.6.3

Vendor Advisories (1)

rubygemsGHSA-7f42-p84j-f58phigh

Sanitize vulnerable to Improper Input Validation and Cross-site Scripting

Mar 21, 2018

References

about.gitlab.com / 2018/06/25/security-release-gitlab-11-dot-0-dot-1-released
github.com / rgrove/sanitize/commit/01629a162e448a83d901456d0ba8b65f3b03d46e
PatchThird Party Advisory
github.com / rgrove/sanitize/issues/176
Issue TrackingThird Party Advisory
debian.org / security/2018/dsa-4358