CVE-2024-23832 Mastodon Vulnerability: Remote user impersonation and takeover

Also 4.1.13, 4.0.13, and 3.5.17 (despite the fact the latter two branches are end-of-life)