An out-of-office delegate can keep approving after the owner is back
Many apps let a manager hand approvals to a colleague while they're on leave. The usual build copies the manager's approver grants onto the delegate, shows an end date in the UI, and leaves cleanup to a nightly job. The approve endpoint then only checks whether the caller has approver rights. That fails in a few places. The cleanup job fails or runs late, so the delegate keeps approving days after the manager is back. Halfway through the leave the manager loses a budget line, but the delegate's
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.