CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover
github.com
2 threads
Fixed in Mastodon v4.2.5 https://github.com/mastodon/mastodon/releases/tag/v4.2.5
Also 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)
glitch-soc also has a patch available for it.