GHSA-47c3-m797-88v2MediumCVSS 6.5

Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through...

Published
August 5, 2026
Last Modified
August 6, 2026

🔗 CVE IDs covered (1)

📋 Description

Improper Authorization vulnerability in Apache Answer.

This issue affects Apache Answer: through 2.0.1.

Any authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

🔗 References (4)