Generally, I always thought you only submit a review request for a manual action when you fixed the problem. But John Mueller of Google said you can submit the request to receive more details on where the specific issues are.
John responded to a request for more information around a manual action over a security issue with a web site on Twitter. The webmaster wanted to know the specific URLs and the timing of the issue so they can find the problem. John said "If you submit the review request, you'll find out if there's something specific."
So I guess, at least in this security issue case, it is okay to submit a review even before you fix the issue?
Maybe be clear that you cannot find the issue and you need assistance?
Forum discussion at Twitter.
Update: It might just be for the "Uncommonly downloaded" warning.
