Structured Content Initiative - What Happened in February?

The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our last update to learn more about what we’ve been…

Multiple vulnerabilities in extension "Magalone Flipbook for TYPO3" (magaloneflipbook)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution, Arbitrary File Upload,…

Remote Code Execution in extension "PHPUnit" (phpunit)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 6.5.14…

SQL Injection in extension "phpmyadmin" (phpmyadmin)

Release Date: March 10, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 5.4.0 and below…

This Month in TYPO3 - February 2020 - Issue #14

Report: Google CMS Security Summit 2020 in Munich

This year, the event took place in Munich, Germany, and Oliver Hader, Benni Mack, and Torben Hansen from the Security Team represented TYPO3. After a casual get-together with all participants the…

We Want You as Core Merger in 2020

In March 2019, we introduced a revised core development structure, consisting of four groups for coordinating TYPO3 Core development Core Initiatives Component Mergers Framework Mergers Product Team…

TYPO3 Version 10.3 — Almost There

Let’s pick a few outstanding aspects as examples what integrators, administrators, and developers can expect from the new version. As the last sprint release of the v10 cycle, TYPO3 version 10.3 is…

10 Ways to Get Ready for TYPO3 v10

Get in it to win it! There are TWO ways to be entered in a prize draw to help boost TYPO3 adoption. Update your TYPO3 Extension or write about TYPO3. Keep an eye on #TYPO3CMSX for news! Read on! 1.…

An Update About the Dashboard for TYPO3

This blog post was originally posted on richardhaeser.com . It is published at typo3.org with permission from the author. Current situation In December, After testing the dashboard as a separate third…

News from the Structured Content Initiative

TYPO3 core development is organised into Strategic Initiatives where people with common interests and skills can improve a specific area of TYPO3 together. The goal of the TYPO3 Structured Content…

Report from the Board QSA, November 2019

The TYPO3 Association Board met at the new TYPO3 Company office in Düsseldorf, Germany, 4th to 5th November 2019. As it coincided with a regular open sprint, there was also a great opportunity for the…

Expanding TYPO3 with Your Help this Spring

If you’re reading this article, you’re likely already a member of the TYPO3 community. You have no doubts that we’re working with the best, most secure, extensible, and versatile open-source CMS there…

Land ho! Feature Freeze Ahead!

TYPO3 v10.2 in December 2019 marked the last release before the Feature Freeze release in February 2020. Now is the time for TYPO3 extension developers to get familiar with the API and embrace the…

The TYPO3 Marketing Team's 2020 Vision

Create. Communicate. Contribute. Under our newly developed slogan, we as the 'newly formed' Marketing Team are looking forward to kick-start the new decade with a blast. We are eager to improve and…

TYPO3 Developers—Get Certified!

The Integrator Certification (TCCI) was the first exam that was offered by the TYPO3 Association when they launched the certification program in 2008. This followed the Certification for Developers…

21 April 2020: TYPO3 v10 LTS Release and Party

The General Assembly is only the second reason why the date has been moved. The primary reason is that the original date (7 April 2020, two weeks earlier) was during the week before Easter , a school…

CSRF in extension "femanager" (femanager)

Release Date: December 17, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-Site Request Forgery Affected Versions:…

Privilege Escalation in extension "femanager direct mail subscription" (femanager_dmail_subscribe)

Release Date: December 17, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Privilege Escalation Affected Versions: 2.1.2…

Cross Site Scripting in extension "File List" (file_list)

Release Date: December 17, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross Site Scripting Affected Versions: 2.3.1…

Multiple vulnerabilities in extension "MKSamlAuth" (mksamlauth)

Release Date: December 17, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Broken Authentication, Authentication Bypass…

TYPO3 10.2.2, 9.5.13 and 8.7.30 security releases published

We are announcing the release of the following TYPO3 updates: TYPO3 10.2.2 TYPO3 9.5.13 LTS TYPO3 8.7.30 LTS All versions are security releases and contain important security fixes - read the…

SQL Injection in low-level Query Generator

Component Type: TYPO3 CMS Subcomponent: Query Generator (ext:lowlevel) Release Date: December 17, 2019 Vulnerability Type: SQL Injection Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11 and…

Directory Traversal on ZIP extraction

Component Type: TYPO3 CMS Subcomponent: Extension Manager (ext:extensionmanger) Release Date: December 17, 2019 Vulnerability Type: Directory Traversal Affected Versions: 8.0.0-8.7.29, 9.0.0-9.5.11…

Cross-Site Scripting in Filelist Module

Component Type: TYPO3 CMS Subcomponent: Filelist Module (ext:filelist) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29, 9.0.0-9.5.11 and…