Apache Answer authorization issue vulnerability

Versions 2.0.2 and earlier of Apache Answer contain an authorization issue vulnerability. This vulnerability stems from the reaction API’s lack of content visibility controls, which may allow unauthorized users to read restricted content in reaction metadata or to add and delete their own reactio...