Search

Insufficient Session Expiration in Admin Tool

Component Type: TYPO3 CMS Subcomponent: Admin Tool (ext:install) Release Date: June 14, 2022 Vulnerability Type: Broken Access Control Affected Versions: 9.0.0-9.5.34 ELTS, 10.0.0-10.4.28,…

Published: 14th June 2022 by Oliver Hader
Cross-Site Scripting in Frontend Login Mailer

Component Type: TYPO3 CMS Subcomponent: Frontend Login Mailer (ext:felogin) Release Date: June 14, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.0.0-9.5.34 ELTS, 10.0.0-10.4.28,…

Published: 14th June 2022 by Oliver Hader
Cross-Site Scripting in Form Framework

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: June 14, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.46 ELTS, 9.0.0-9.5.34 ELTS,…

Published: 14th June 2022 by Oliver Hader
Information Disclosure via Exception Handling/Logger

Component Type: TYPO3 CMS Subcomponent: Exception Handling/Logger (ext:core) Release Date: June 14, 2022 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.56 ELTS, 8.0.0-8.7.46…

Published: 14th June 2022 by Oliver Hader
Information Disclosure via Export Module

Component Type: TYPO3 CMS Subcomponent: Export Module (ext:impexp) Release Date: June 14, 2022 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.56 ELTS, 8.0.0-8.7.46 ELTS,…

Published: 14th June 2022 by Oliver Hader
TYPO3 11.5.11 and 10.4.29 security releases published

The following TYPO3 updates have been released: TYPO3 11.5.11 LTS TYPO3 10.4.29 LTS All versions are security releases and contain important security fixes - read the corresponding security advisories…

Published: 14th June 2022 by Oliver Hader
Cross-Site Scripting in extension "Embedding schema.org vocabulary" (schema)

Release Date: June 14, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Embedding schema.org vocabulary" (schema) Vulnerability…

Published: 14th June 2022 by Torben Hansen
Cross-Site Scripting in extension "Matomo Integration" (matomo_integration)

Release Date: June 14, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Matomo Integration" (matomo_integration) Vulnerability…

Published: 14th June 2022 by Torben Hansen
Cross-Site Scripting in extension "libconnect" (libconnect)

Release Date: June 14, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "libconnect" (libconnect) Vulnerability Type: Cross-Site…

Published: 14th June 2022 by Torben Hansen
typo3.org Website Team Report 2022 Q1

Sprints / t3o Remote Days We have done t3o Remote Days on: January 15th and 25th February 15th and 25th March 15th and 25th We meet on the official TYPO3 Discord server and work from 8pm to mostly…

Published: 7th June 2022
Deprecation and Shutdown of TER SOAP Interface

The SOAP interface was introduced more than 15 years ago, for managing and uploading extensions. TYPO3 version 4.5 was the last version when you could upload extensions via the TYPO3 backend. What Is…

Published: 2nd June 2022
GDPR Report 2021

Data protection measures affect 983 TYPO3 Association members, and the 12,894 registered users of typo3.org . Olivier Dobberkau, Alain Veuve and I are particularly involved in the data protection work…

Published: 31st May 2022
Documenting TYPO3 Version 12

Extension Authors Need Good Docs Too It’s not sure integrators and editors that rely on up-to-date documentation. Extension authors need to know about any Core API changes so they can update their…

Published: 24th May 2022
Standardization of TYPO3 Documentation—May 2022

In the past, creating full documentation for a TYPO3 project often started with copying and adapting the basic file structure of an existing set of documentation. Since creating documentation is not…

Published: 17th May 2022
Why TYPO3 Certifications Matter

Let me start with a few questions about your relationship with TYPO3. Do you work for an agency that implements TYPO3 sites for their clients? Do you typically set up and configure the TYPO3…

Published: 12th May 2022
TYPO3 11.5.10 and 10.4.28 maintenance releases published

The following TYPO3 updates have been released: TYPO3 11.5.10 LTS TYPO3 10.4.28 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for…

Published: 10th May 2022 by Oliver Hader
Announcement of Core Mergers 2022

In March 2022, we announced the call for Core Mergers . We welcome familiar faces and new contributors to the team to help to shape the TYPO3 Core. Today, I’m proud to announce the people building the…

Published: 28th April 2022
Structured Content Initiative—What Happened Between November 2021 and April 2022?

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

Published: 27th April 2022
Cross-Site Scripting in extension "Grid Elements" (gridelements)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Grid Elements" (gridelements) Vulnerability Type:…

Published: 26th April 2022 by Torben Hansen
Multiple vulnerabilities in extension "Adminer" (t3adminer)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Adminer" (t3adminer) Vulnerability Type: Server-side…

Published: 26th April 2022 by Torben Hansen
SQL Injection in extension "One is Enough Library" (oelib)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "One is Enough Library" (oelib) Vulnerability Type: SQL…

Published: 26th April 2022 by Torben Hansen
SQL Injection in extension "Seminar Manager" (seminars)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Seminar Manager" (seminars) Vulnerability Type: SQL…

Published: 26th April 2022 by Torben Hansen
Remote Code Execution in extension "Job portal" (psvneo_jobfair)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job portal" (psvneo_jobfair) Vulnerability Type: Remote…

Published: 26th April 2022 by Torben Hansen
Harbor Talk Videos

You can watch these and other videos on the TYPO3 YouTube channel . You can also follow TYPO3 on Instagram ( @typo3_official ) so you never miss TYPO3 news.

Published: 19th April 2022
TYPO3 11.5.9 and 10.4.27 maintenance releases published

The following TYPO3 updates have been released: TYPO3 11.5.9 LTS TYPO3 10.4.27 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

Published: 12th April 2022 by Oliver Hader