Missing Access Check in extension "Register to tt_address" (registeraddress)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Missing Access Check Affected Versions: 1.0.6…

Cross-Site Scripting in extension "Heise Shariff" (rx_shariff)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-Site Scripting Affected Versions: 10.3.2…

TYPO3 9.3.3, 8.7.18 and 7.6.31 released

We are announcing the release of the following TYPO3 updates: TYPO3 9.3.3 TYPO3 8.7.18 LTS TYPO3 7.6.31 LTS All versions are maintenance releases and contain improvements only. Recent TYPO3 versions…

This Month in TYPO3 - July 2018 - Issue #4

A new structure for the TYPO3 Core team

Background Back in the beginning, the TYPO3 Core Team was a closed group of people developing TYPO3 behind the curtain. In 2007 that changed, the core mailing list was opened to the public and…

Insecure Deserialization in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Form Framework (ext:form) Release Date: July 12, 2018 Vulnerability Type: Insecure Deserialization Affected Versions: 8.5.0 to 8.7.16 and 9.0.0 to…

Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: July 12, 2018 Vulnerability Type: Insecure Deserialization & Arbitrary Code Execution Affected Versions: 7.0.0 to 7.6.29, 8.0.0 to 8.7.16 and 9.0.0 to 9.3.0…

Authentication Bypass in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Salted Passwords (ext:saltedpasswords) Release Date: July 12, 2018 Vulnerability Type: Authentication Bypass Affected Versions: 7.0.0 to 7.6.29,…

TYPO3 9.3.1, 8.7.17 and 7.6.30 security releases published

We are announcing the release of the following TYPO3 updates: TYPO3 9.3.1 TYPO3 8.7.17 LTS TYPO3 7.6.30 LTS All versions are security releases and contain important security fixes - read the…

Italian Book Release: Extbase and Fluid

TYPO3 extensions play a major role in the day-to-day business of developing TYPO3 sites. To become a seasoned TYPO3 developer, one of the basics you need to learn is how to program and implement these…

How to Use Slack in the TYPO3 Community

It is a free software client that is available on many platforms. Thanks to Slack, the TYPO3 community is able to: Chat (via group chat or direct messaging) Exchange files Call and make presentations…

This Month in TYPO3 - June 2018 - Issue #3

Say hello to our new Core Team Members!

First learning about TYPO3 in 2008 Mathias has come a long way gathering a lot of knowledge about many aspects and features within TYPO3 leading him to become a TYPO3 core developer in 2018. If he is…

TYPO3 Site Package Tutorial

Following the steps of the Site Package Tutorial , written by Michael Schams, you can build a modern extension with all relevant files stored at a central point. Changes can easily be tracked in…

comwrap Becomes TYPO3 Association Platinum Member and TYPO3 GmbH Business Partner

“TYPO3 has been our core content management technology for years,” says Mathias Hermann, CEO of comwrap. “Through our engagement, we show both old and new customers that we are the right partner to…

TYPO3 v9.3.0 released

The outstanding aspects of the 4th sprint release are SEO features "out of the box", new options to make it easy to comply with GDPR and added support for stronger password hashing functions, which…

TYPO3 8.7.16 and 7.6.29 released

We are announcing the release of the following TYPO3 updates: TYPO3 8.7.16 LTS TYPO3 7.6.29 LTS All versions are maintenance releases and contain improvements only. Download TYPO3 can be installed in…

Recap: TYPO3 Review Friday in June 2018

This time round, the day before our Review Friday on June 1st was a public holiday hereabouts. And honestly, what can be nicer than taking a single day off from work and getting a long 4-day weekend…

This Month in TYPO3 — May 2018 — Issue #2

Table of Contents TYPO3 Core GDPR Releases TYPO3 Association and TYPO3 Company GDPR - What you need to know GDPR - How to continue personalization after May 25th How to make your TYPO3 application…

Recap: TYPO3 Form Initiative Sprint Weimar

What is an initiative? An “initiative” consists of people with a common interest to make long-term improvements in a specific area of TYPO3 including strategic plans, goals, task-breakdown and…

TYPO3 8.7.15 released

Recent TYPO3 v8.7.14 unfortunately introduced a regression in Indexed Search - see https://forge.typo3.org/issues/85064 for details. We are sorry for any inconveniences this regression might have…

TYPO3 9.2.1, 8.7.14 and 7.6.28 released

The TYPO3 Community announces a special release that offers improved GDPR compliance tools right out of the box. This release was lead by the GDPR Initiative , aiming to make it easier for TYPO3…

Recap: TYPO3 Core Code Sprint in Padua, Italy

Padua is located in north-east Italy near Venice and is known for its rich history including hosting the University of Padua where Galileo Galilei was a lecturer and being the setting for a play from…

Recap: TYPO3 Review Friday in May 2018

Why Have a TYPO3 Review Friday? While the TYPO3 core is relatively stable and already has many talented developers scrutinizing the code base, it doesn’t mean that the CMS is bug free. That’s because…

This Month in TYPO3 — May 2018 — Issue #1

Please bear with us if there are some topics in this article that are not directly associated with the last month's activities, but we thought they might be interesting anyway. Table of Contents TYPO3…