Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:core, ext:frontend) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11…

Cross-Site Scripting in Form Framework validation handling

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11 and…

Possible Insecure Deserialization in Extbase Request Handling

Component Type: TYPO3 CMS Subcomponent: Extbase Request Handling (ext:extbase) Release Date: December 17, 2019 Impact: Possible Insecure Deserialization Affected Versions: All before 10.0.0 Severity:…

Announcing Selected Budget Ideas for 2020

TYPO3 Version 10.2 — Treasure Hunting!

Let’s pick a few outstanding aspects as examples what integrators, administrators, and developers can expect from the new version. System integrators use the system extension Frontend Login (extension…

Skill Verification Access for the TYPO3 Academic Committee

The TYPO3 Academic Committee is the interface between universities and the TYPO3 community. To improve TYPO3 education further, SkillDisplay decided to give members of the committee free access to…

TYPO3 Initiative Week—Insider Report

24 participants from 8 initiatives met for 1 week in Festenburg, Oberharz, Germany to communicate, collaborate and connect with each other and bring TYPO3 initiatives to the next level. From the first…

TYPO3 Conference Wrap Up!

Making Fast Connections The atmosphere at Fokker Terminal was bright and fresh. There was so much natural light filling the space, with plenty of coffee and tea available, and places to congregate and…

Impressions of the Developer Days from the Documentation Team

Find out more about the event: Impressions from T3DD with quotes from more speakers and attendees. What’s Up, Docs? TYPO3 Developer Days is a great event to meet other developers and remind everyone…

Impressions from T3DD19

Find out more When possible, speakers have posted links to their slides in their talk descriptions in the program . The Documentation Team also got together at the event and they’ve prepared a blog…

TYPO3 9.5.11 and 8.7.29 maintenance releases published

We are announcing the release of the following TYPO3 updates: TYPO3 9.5.11 LTS TYPO3 8.7.29 LTS All versions are maintenance releases and contain some important bugfixes, including some regression…

Truncated passwords during authentication process on typo3.org services

Release Date: October 30, 2019 Component Type: LDAP passwort storage & authentication (via my.typo3.org ) Impact: Truncated password during authentication Serverity: critical Suggested CVSS v3:…

Press Release: TYPO3 Awards Highlight CMS Project Excellence at Industry Summit

Remote Code Execution in extension "freeCap CAPTCHA" (sr_freecap)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution Affected Versions: 2.4.5…

Multiple vulnerabilities in extension "SLUB: Event Registration" (slub_events)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Remote Code Execution, Unrestricted File…

Information Disclosure in extension "Direct Mail" (direct_mail)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Information Disclosure Affected Versions:…

SQL Injection in extension "URL redirect" (url_redirect)

Release Date: October 15, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 1.2.1 and…

TYPO3 v9.5.10 LTS and v8.7.28 LTS released

We are announcing the releases of TYPO3 v9.5.10 LTS and v8.7.28, as scheduled. These versions are maintenance releases and contain bug fixes only. For details about the releases, please visit the…

Call for budget application ideas - TYPO3 Association Budget 2020

Total Funds available for 2020 In coordination with the Treasurer of the TYPO3 Association, the TYPO3 Association Board is releasing the available budget sum for 2020. By releasing the budget amount…

TYPO3 Version 10.1 - On the High Seas

Today, we released the second sprint release of the TYPO3 v10 series, and we are thrilled to announce the availability of TYPO3 version 10.1. The new release received more than 250 Git commits…

Bringing Teams Together at the Combined TYPO3 Sprint

Over three days, we coded, wrote and designed together. The participants included an exciting mix of experienced sprinters and some who were on their very first sprint. What was it all about? A Report…

Better Multilingual Support with Crowdin

Join the initiative and help be a part of translating TYPO3. Introducing Crowdin to TYPO3! Crowdin is a localization management platform and offers the core features essential for delivering great…

Meet at the Summits—TYPO3 Conference 2019

Three Summits Offering Three Views of TYPO3 In addition to contributors and business leaders in the TYPO3 community, this event has also attracted people in IT leadership roles. Whether they are in…

TYPO3 v9.5.9 LTS released

We are announcing the release of TYPO3 v9.5.9 LTS, as scheduled. This version is a maintenance release and contains bug fixes only. For details about the release, please visit the following website:…

Updates from T3CON 2019: Selected Sessions Announced!

Check out the conference program Highlights from the Program Our keynote speaker Christian Kromme will talk about the trends that will impact your organization and services in Humanification: Go…