CVE-2026-48912: Apache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL

<p>Posted by Enxin Xie on Aug 05</p>Severity: moderate <br /> <br /> Affected versions:<br /> <br /> - Apache Answer through 2.0.1<br /> <br /> Description:<br /> <br /> Improper Input Validation vulnerability in Apache Answer.<br /> <br /> This issue affects Apache Answer: through 2.0.1.<br /> <br /> A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete ot