CVE-2026-82982

Name of the Vulnerable Software and Affected Versions Approval app (affected versions not specified)

Description The 'approve/reject' endpoint fails to properly enforce a freshness check. The system is designed to require the current etag of a file to ensure that an approver does not act on a version of a file that has changed since it was reviewed. However, the backend only performs this validation if the etag parameter is present and non-empty. An attacker can bypass this security measure by omitting the etag parameter from the request, allowing the approval or rejection of a file version that was not reviewed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.