gitlab/gem/command_wrap/CVE-2013-1875
Remote command execution in Ruby Gem Command Wrap
Commands executed if the remote URL or filename contains the shell character ';'. The commands will be executed as the client user if tricked into using the malicious URL or filename.