Cross-Site Scripting in extension "Kitodo.Presentation" (dlf)

Release Date: July 29, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Kitodo.Presentation (dlf) Vulnerability Type: Cross-Site…

TYPO3 10.4.6 and 9.5.20 security releases published

The following TYPO3 updates have been released: TYPO3 10.4.6 LTS TYPO3 9.5.20 LTS Both versions are security releases and contain important security fixes - read the corresponding Security Advisories…

Sensitive Information Disclosure

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: July 28, 2020 Vulnerability Type: Sensitive Information Disclosure Affected Versions: 9.0.0-9.5.19,…

Sensitive Information Disclosure in extension "Media Content Element" (mediace)

Release Date: July 28, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Media Content Element (mediace) Vulnerability Type:…

Potential Privilege Escalation

Component Type: TYPO3 CMS Subcomponent: eID API (ext:frontend, ext:core) Release Date: July 28, 2020 Vulnerability Type: Privilege Escalation, Remote Code Execution Affected Versions: 9.0.0-9.5.19,…

Critical vulnerability in legacy versions of TYPO3 CMS

TYPO3-EXT-SA-2020-014 addresses the same vulnerability - the functionality has been extracted back then during TYPO3 v7 development to extension mediace . Component Type: TYPO3 CMS Release Date: July…

Structured Content Initiative—What Happened in May–June 2020?

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

Report from the typo3.org Team 2020—Part 1

Team Sprints / Remote Days Like all of the TYPO3 teams and nearly the whole of humanity, we also faced the problem named COVID-19. Just before the nationwide lockdown in Germany started in March, we…

Multiple vulnerabilities in extension "mm_forum" (mm_forum)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: mm_forum (mm_forum) Vulnerability Type: Cross Site…

Remote Code Execution in extension "Turn!" (turn)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Turn! (turn) Vulnerability Type: Remote Code Execution…

Broken Access Control in extension "typo3_forum" (typo3_forum)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: typo3_forum (typo3_forum) Vulnerability Type: Broken…

TYPO3 10.4.5 maintenance release published

The following TYPO3 update has been released: TYPO3 10.4.5 LTS This version is a maintenance release only. Further upgrade instructions No database upgrades are required for this maintenance release.…

Cross-Site Scripting in extension "Faceted Search" (ke_search)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Faceted Search (ke_search) Vulnerability Type: Cross-Site…

This Month in TYPO3 - May 2020 - Issue #17

This Month in TYPO3 - April 2020 - Issue #16

A Special Call-Out for TYPO3 Market Research

Why Are We Doing This? Marketing Team Lead Luisa laid out the 2020 Vision : to raise awareness, interest, and consideration for decision makers. In the first quarter, we were focused on release…

TYPO3 v10 Community Content Roundup

You can also submit your links to the next edition of This Month in TYPO3. Submit Your Link to This Month in TYPO3 And the Winner Is… In the run up to the release of TYPO3 v10, we asked people in the…

Who Does What in the Association Board, 2020?

Mentoring Digital Transformation with TYPO3

“That’s where my career started. People answered my silly questions on the web forums. They were helpful and friendly, and after some years I realized I had reached a level where I could help them…

Recap from the First Online Marketing Sprint (Q2/2020)

The participants engaged in lively discussion and strategic planning for two days, in large group hangouts lasting three hours and subsequent breakout sessions. The Contributors Were Julian Böhm,…

TYPO3 10.4.4 and 9.5.19 maintenance releases published

The following TYPO3 updates have been released: TYPO3 10.4.4 LTS TYPO3 9.5.19 LTS Both versions are maintenance releases only. Further upgrade instructions No database upgrades are required for these…

TYPO3 Book Report—Who’s Writing the TYPO3 Book?

Sign Up to the TYPO3 Guidebook Mailing List How did you get into technical writing, Felicity? In my former life I was a business analyst, and I always enjoyed the writing aspect of that role. I wrote…

TYPO3 Users, Please Let Us Know Your Feedback!

The TYPO3 Project has started to use G2.com , the tech marketplace, as a prominent place to show the TYPO3 Project to millions of business decision-makers each month. “Your peers come to G2 to get an…

Structured Content Initiative—What happened in April? The survey results!

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

TYPO3 10.4.3 and 9.5.18 maintenance releases published

The following TYPO3 updates have been released: TYPO3 10.4.3 LTS TYPO3 9.5.18 LTS Both versions are maintenance releases only. They aim to reduce and fix side-effects of recent TYPO3 v10.4.2 and…