rapid7/metasploit-framework — pull request #2433 by jwpari (2013-09-28 06:31:42+00:00)
Title: Sidekiq DelayedMailer Code Execution Vulnerability

Had a sneaking hunch combining a usually unauthenticated message queue (or redis server) and arbitrarily specified jobs was a recipe for disaster.

Tested against: https://github.com/gitlabhq/gitlab-vagrant-vm