GHSA-47c3-m797-88v2MediumCVSS 6.5
Improper Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through...
🔗 CVE IDs covered (1)
📋 Description
Improper Authorization vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.0.1.
Any authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation. Users are recommended to upgrade to version 2.0.2, which fixes the issue.