[GHSA-89hj-xfx5-7q66] Django Reuses Cached CSRF Token

[MarkLee131]

Updates

• Affected products
• References

Comments
add 4 patches:
django/django@1170f28
django/django@6872f42
django/django@d63e209
django/django@380545b
for v1.4, v1.5, v.16 and v1.7

[darakian]

Dropping the 1.7 patch as we don't have a 1.7 affected product and that commit is otherwise duplicative. Many thanks for the others though

[advisory-database]

Hi @MarkLee131! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!