It was always thought that one only needs to submit a review request for the manual action after fixing the problem. John Mueller from Goggle said that one can submit the request for receiving more details about the particular issues.
John was responding to one of the requests for further information regarding manual action in case of a security issue with a site on Twitter. The webmaster inquired about the particular URLs and the time of the issues in order to figure out the problem. John mentioned that if the review request is submitted, you will be able to figure out if there is any particular problem.
This might mean that at least in the case of this security issue, you can submit a review before fixing the issue. It will help if you are clear that you are unable to figure out the problem and need help.
Forum discussion at Twitter.