TYPO3 Neos Technical Discussion August 20th

TypoScript folder Neos stores TypoScript in Resources/Private , TYPO3 CMS with Extbase has the convention to store it in Configuration/TypoScript . In case of Neos somehow it makes sense to have it in…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: December 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.48,…

Submit your 2013 budget application now!

This is Mike* and he is an open source enthusiast. He is browsing thru one of his favorites websites and finds interesting news. It's the TYPO3 Association's announcement for the call for budget…

TYPO3 GRUENE (startgreen)

TYPO3 für BÜNDNIS 90/DIE GRÜNEN. TYPO3 GRUENE ist ein Template und liefert eine Website im Design von BÜNDNIS 90/DIE GRÜNEN. Es ist responsive, optimiert für Smartphone, Tablet und Desktop. Mit Launch…

Show extension details Download ZIP of version 10.4.2 Extension documentation

TYPO3 v10 Social Media Banners

TYPO3 v10 Social Media Banners Feel free to download and use these social media banners in your TYPO3 v10 release marketing. The banners are available with and without text. If you're using the banners without text, refer to the Style Guide for…

TYPO3 v11 Release Material

TYPO3 v11 LTS is here! TYPO3 v11 LTS Release Material Explore the newest addition to the TYPO3 fleet with these helpful resources. With the release of TYPO3 v11 LTS on 5th October 2021, TYPO3 will reach yet another milestone. The release of TYPO3 v11…

Tip-a-friend - Header Injection

Component Type: Third party extension. The extension is not part of the TYPO3 default installation Affected Versions: 1.2.2 and earlier Vulnerability Type: Header Injection Severity: HIGH Problem…

Several vulnerabilities in third party extensions

Release Date: June 14, 2011 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

TYPO3 Agency Meetup Days 2015 – A report on the Frankfurt meeting

Participants At the Frankfurt meetup 6 different agencies have gathered, with a total of 8 representatives. They have met Alain Veuve and Fabian Stein from the TYPO3 Marketing Team, Mathias Schreiber…

New Version of TYPO3 CMS 7 LTS now available

Baar, 2015-11-10 The new version of TYPO3 CMS 7 LTS is available effective immediately. It will be supported for three years as part of the Long Term Support from the TYPO3 CMS team. The completely…

Carrier failure causes outages on typo3.org infrastructure

Due to an unplanned power failure at our network carrier, the data center where some typo3.org subdomains are hosted have been completely offline from June 24 04:37:15 UTC+2 to June 24 19:28:48 UTC+2…

TYPO3 security (a3_security)

Extension enables/disables apache write permission on typo3conf/ext, typo3conf/localconf.php, typo3conf/extTables.php and other user defined files or folders.

Show extension details Download ZIP of version 1.2.0 Extension documentation

TYPO3 CMS 6.0 released

After seven months of collaborative work a major new version of TYPO3 CMS has been released. In an team effort including over 100 people from several countries TYPO3 CMS 6.0 " Back To The Future "…

Broken Access Control in Import Module

Component Type: TYPO3 CMS Vulnerable subcomponent: Import/Export module (ext:impexp) Release Date: June 25, 2019 Vulnerability Type: Broken Access Control Affected Versions: 9.3.0-9.5.7 Severity: High…

Privilege Escalation in TYPO3 Neos

Component Type: TYPO3 Neos Release Date: March 28, 2015 Bulletin Update: none Vulnerability Type: Authentication Bypass Affected Versions: 1.1.0 to 1.1.2 and 1.2.0 to 1.2.2 Severity: Low Suggested…

TYPO3 conference survey

This year was packed with TYPO3 events. We had an unprecendented number of codesprints and TYPO3camps. As usual there are the official TYPO3 events like the Snowboard Tour, the TYPO3 conference and…

Launch of the new extension repository

New features: TER2 With the increasing amount of extensions and popularity of the TYPO3 extension repository the need for a more stable, faster and more flexible TER arose. At the T3BOARD05 Karsten…

Bringing Workspaces up to speed

One of the key features that makes TYPO3 an enterprise-level open source content management system is the possibility to work with Workspaces, a functionality that is built right into the TYPO3 Core.…

Video Commune (vcommune)

Video Commune doesnt store video files, the idea is to share on-line videos links of the main famous providers youtube,,.. .The extension is being developed with the MVC framework,lib 0.0.24 and extjs…

Show extension details Download ZIP of version 0.0.3 Extension documentation

WebRTC SIP Phone (webrtc_phone)

WebRTC implementation on the Typo3 page, so that web visitor can call directly using web browser. Needs a SIP server with SIP over WebSocket capability such as OverSIP, Kamaililio, Asterisk OfficeSIP…

Show extension details Download ZIP of version 0.0.1 Extension documentation

New maintenance policy

Today the TYPO3 Core Team published its new maintenance policy on typo3.org (see link below). This translates into a nice new version matrix (thanks to Oliver Klee) that shows at a glance what is the…

Sensitive links in search results of TYPO3 extension indexed_search

Component Type: TYPO3 CMS Subcomponent: Indexed Search (ext:indexed_search) Release Date: July 20, 2021 Impact: Information Disclosure Type: Advisory Problem Description On TYPO3 websites where the…

iFrame for HTML5 Websites (lp_iframe)

Yet another iFrame extension with HTML5 support. Rendered with TypoScript. Doc: http://docs.typo3.org/typo3cms/extensions/lp_iframe/ and Git: https://github.com/lars85/TYPO3-Extensions-lp_iframe/

Show extension details Download ZIP of version 1.3.0 Extension documentation

You, me, and TYPO3!

You, me, and TYPO3! Always wanted to know who make up this great community that everybody is talking about? You, me, and TYPO3! is a interview series introducing fantastic people that are part of the community - just by being themselves, and being…

This is the End - for TYPO3 v7 LTS

In November 2015, the TYPO3 community released TYPO3 v7 LTS - a groundbreaking version with an endless list of improvements, that brought TYPO3 CMS back on track in the CMS market. A few highlights:…