Search

Ten Years of News

To make a little noise about the jubilee, I reached out to Georg, who lives in Linz, Austria, to learn more about his decade-long life and journey with the extension News (aka. News system ). 2011: A…

Published: 9th September 2021
Structured Content Initiative—What Happened Between November 2020 and August 2021?

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

Published: 31st August 2021
Extension Award for Documentation

Extensions play an important role for the success of TYPO3. Documentation plays an important role for the success of an extension. To give more attention to extension documentation we are launching a…

Published: 29th August 2021
Removal of Community Extensions From forge.typo3.org

In the past, Forge was a place where a community extension could host its issues, news, internal documents, and a wiki. It was also a place for project planning, like tracking progress and spent time.…

Published: 25th August 2021
Meet Daniel Homorodean, TYPO3 Expansion Leader, Romania (Application Podcast S2E03)

Listen to the full interview in the audio player here, watch the interview video below, where you’ll also find a full transcript of our conversation. Don’t forget to subscribe and send us your…

Published: 22nd August 2021
TYPO3 10.4.20, 9.5.30 and 11.3.3 maintenance releases published

The following TYPO3 updates have been released: TYPO3 10.4.20 LTS TYPO3 9.5.30 LTS TYPO3 11.3.3 These versions are maintenance release only, and fix various regressions regarding the introduced…

Published: 16th August 2021 by Oliver Hader
Report From “QA Best Practices Usable by Community” (August 2021)

The whole outcome, and current process, is available in Gitlab and at Github . This report will only cover the biggest topics, not every single change. Update to XLIFF Version 1.2 We wanted to lint…

Published: 13th August 2021
SQL Injection in extension "Newsletter" (newsletter)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Newsletter" (newsletter) Vulnerability Type: SQL…

Published: 10th August 2021 by Torben Hansen
Multiple vulnerabilities in Extension "Dated News" (dated_news)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Dated News" (dated_news) Vulnerability Type: SQL…

Published: 10th August 2021 by Torben Hansen
Cross Site Scripting in Extension "Yoast SEO for TYPO3" (yoast_seo)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Yoast SEO for TYPO3" (yoast_seo) Vulnerability Type:…

Published: 10th August 2021 by Torben Hansen
Multiple vulnerabilities in Extension "Miniorange Saml" (miniorange_saml)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Miniorange Saml" (miniorange_saml) Vulnerability Type:…

Published: 10th August 2021 by Torben Hansen
Cross-Site Scripting in Extension "femanager" (femanager)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "femanager" (femanager) Vulnerability Type: Cross-Site…

Published: 10th August 2021 by Torben Hansen
Denial of Service in Extension "Deferred image processing" (deferred_image_processing)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Deferred image processing" (deferred_image_processing)…

Published: 10th August 2021 by Torben Hansen
Sensitive Information Disclosure in “Extbase Yaml Routes” (routes)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: “Extbase Yaml Routes” (routes) Vulnerability Type:…

Published: 10th August 2021 by Torben Hansen
TYPO3 11.3.2, 10.4.19, 9.5.29, 8.7.42, 7.6.53 security releases published

Know side-effects in recent releases updated Wed, Aug 11th 2021, 08:30 UTC Integrating a new HTML sanitizer to avoid cross-site scripting in user-submitted content caused some negative side effects.…

Published: 10th August 2021 by Oliver Hader
Cross-Site Scripting via Rich-Text Content

Component Type: TYPO3 CMS Subcomponent: Content Rendering, HTML Parser (ext:frontend, ext:core) Release Date: August 10, 2021 Vulnerability Type: Cross-Site-Scripting Affected Versions: 7.0.0-7.6.52…

Published: 10th August 2021 by Oliver Hader
The TYPO3 Demo Project Meets Hebrew

One of TYPO3's main strengths is its multilingual capabilities. It is built with international audiences in mind. TYPO3 has long supported non-Latin character sets, for example Arabic, Chinese, and…

Published: 4th August 2021 by Desi Lochner
Documentation Restructuring—Status Update

Visit the New Documentation Home Page We collected feedback from a range of different users to gather their opinions and find out what we can do to improve their overall experience with the docs. The…

Published: 22nd July 2021
TYPO3 11.3.1, 10.4.18, 9.5.28, 8.7.41, 7.6.52 security releases published

The following TYPO3 updates have been released: TYPO3 11.3.1 TYPO3 10.4.18 LTS TYPO3 9.5.28 LTS TYPO3 8.7.41 ELTS TYPO3 7.6.52 ELTS All versions are security releases and contain important security…

Published: 20th July 2021 by Oliver Hader
CSV Code Injection

Component Type: 3rd party extensions (not being part of TYPO3 default installation) Release Date: July 20, 2021 Impact: CSV Code Injection Type: Advisory Problem Description CSV code injection is an…

Published: 20th July 2021 by Torben Hansen
Sensitive links in search results of TYPO3 extension indexed_search

Component Type: TYPO3 CMS Subcomponent: Indexed Search (ext:indexed_search) Release Date: July 20, 2021 Impact: Information Disclosure Type: Advisory Problem Description On TYPO3 websites where the…

Published: 20th July 2021 by Torben Hansen
Information Disclosure in User Authentication

Component Type: TYPO3 CMS Subcomponent: User Authentication (ext:core) Release Date: July 20, 2021 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.51 ELTS, 8.0.0-8.7.40 ELTS,…

Published: 20th July 2021 by Oliver Hader
Cross-Site Scripting in Backend Grid View

Component Type: TYPO3 CMS Subcomponent: Backend Grid View (ext:backend) Release Date: July 20, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.40 ELTS, 9.0.0-9.5.27,…

Published: 20th July 2021 by Oliver Hader
Cross-Site Scripting in Page Preview

Component Type: TYPO3 CMS Subcomponent: Page Preview (ext:viewpage) Release Date: July 20, 2021 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.0.0-9.5.27, 10.0.0-10.4.17, 11.0.0-11.3.0…

Published: 20th July 2021 by Oliver Hader
Reinventing Enterprise Certifications

Let’s take a look at the pros and cons of established certification structures on the enterprise market today. Pros Certifications are perceived as milestones for the person holding them. Achieving…

Published: 20th July 2021