This Month in TYPO3 (August, 2014)

The month of August of the Year 2014 TYPO3 CMS Flat design for TYPO3 CMS backend Felix Kopp announced in, what became a very lively twitter thread , a flat design for TYPO3 backend fully based on…

Cross-site scripting vulnerability in extension powermail for TYPO3 (powermail)

Release Date: May 30, 2012 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.6 and below Vulnerability Type:…

Sensitive Information Disclosure in “Extbase Yaml Routes” (routes)

Release Date: August 10, 2021 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: “Extbase Yaml Routes” (routes) Vulnerability Type:…

Multiple SQL Injection vulnerabilities in extension "Website Photo Gallery" (jm_gallery)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.9.1 and below Vulnerability Type: SQL Injection Severity: High…

Cross-Site Scripting vulnerability in extension Direct Mail (direct_mail)

Release Date: December 1, 2009 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 2.6.4 and all versions below…

Submit your 2013 budget application now!

This is Mike* and he is an open source enthusiast. He is browsing thru one of his favorites websites and finds interesting news. It's the TYPO3 Association's announcement for the call for budget…

T3CON07: Slides of 5.0-related talks online

After the TYPO3 Conference 2007 in Karlsruhe the slides of all talks related to TYPO3 5.0 are available for download. Robert Lemke and Daniel Hinderink outline benefits of the new architecture for…

TYPO3 v11 Release Material

TYPO3 v11 LTS is here! TYPO3 v11 LTS Release Material Explore the newest addition to the TYPO3 fleet with these helpful resources. With the release of TYPO3 v11 LTS on 5th October 2021, TYPO3 will reach yet another milestone. The release of TYPO3 v11…

By-passing Cross-Site Scripting Protection in HTML Sanitizer

Component Type: TYPO3 CMS Subcomponent: HTML Sanitizer (based on typo3/html-sanitizer ) Release Date: December 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.48,…

Improper Access Control of Resources Referenced by t3:// URI Scheme

Component Type: TYPO3 CMS Subcomponent: Link Handler (ext:core, ext:backend, ext:filelist) Release Date: February 13, 2024 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.56,…

Podcast about TYPO3 8

Shortly before the TYPO3 CMS 8.5 sprint release Sebastian Michaelsen interviewed Benni Mack about the overall development of TYPO3 8. This interview was just published as a new episode of the T3Bits…

Several vulnerabilities in third party extensions

Release Date: June 14, 2011 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

New Version of TYPO3 CMS 7 LTS now available

Baar, 2015-11-10 The new version of TYPO3 CMS 7 LTS is available effective immediately. It will be supported for three years as part of the Long Term Support from the TYPO3 CMS team. The completely…

Content Blocks on the Way to the Core

Integrating the Separate Parts of Content Blocks Into the Core An important building block in the procedure is the exchange with the Core team. Based on this exchange, we have been able to encapsulate…

TYPO3 Neos Technical Discussion August 20th

TypoScript folder Neos stores TypoScript in Resources/Private , TYPO3 CMS with Extbase has the convention to store it in Configuration/TypoScript . In case of Neos somehow it makes sense to have it in…

TYPO3 CMS 6.0 released

After seven months of collaborative work a major new version of TYPO3 CMS has been released. In an team effort including over 100 people from several countries TYPO3 CMS 6.0 " Back To The Future "…

Saarland

TYPO3 Usergroup Saarland Hier sind alle TYPO3-Interessierte aus dem Saarland oder auch außerhalb an der richtigen Stelle. Wir freuen uns über neue Mitglieder oder auch nur auf neue Besucher offline und online. Aktuelle Meldungen und Evenst findet ihr…

Bringing Workspaces up to speed

One of the key features that makes TYPO3 an enterprise-level open source content management system is the possibility to work with Workspaces, a functionality that is built right into the TYPO3 Core.…

TYPO3 Agency Meetup Days 2015 – A report on the Frankfurt meeting

Participants At the Frankfurt meetup 6 different agencies have gathered, with a total of 8 representatives. They have met Alain Veuve and Fabian Stein from the TYPO3 Marketing Team, Mathias Schreiber…

TYPO3 v10 Social Media Banners

TYPO3 v10 Social Media Banners Feel free to download and use these social media banners in your TYPO3 v10 release marketing. The banners are available with and without text. If you're using the banners without text, refer to the Style Guide for…

All in One Accessibility (skt_allinoneaccessibility)

All in One Accessibility widget improves Typo3 website ADA compliance and browser experience for WCAG 2.1, ATAG 2.0, ADA, Section 508, Australian DDA, European EAA EN 301 549, UK Equality Act…

Show extension details Download ZIP of version 1.0.8

TYPO3 GRUENE (startgreen)

TYPO3 für BÜNDNIS 90/DIE GRÜNEN. TYPO3 GRUENE ist ein Template und liefert eine Website im Design von BÜNDNIS 90/DIE GRÜNEN. Es ist responsive, optimiert für Smartphone, Tablet und Desktop. Mit Launch…

Show extension details Download ZIP of version 10.4.2 Extension documentation

Broken Access Control in Import Module

Component Type: TYPO3 CMS Vulnerable subcomponent: Import/Export module (ext:impexp) Release Date: June 25, 2019 Vulnerability Type: Broken Access Control Affected Versions: 9.3.0-9.5.7 Severity: High…

Launch of the new extension repository

New features: TER2 With the increasing amount of extensions and popularity of the TYPO3 extension repository the need for a more stable, faster and more flexible TER arose. At the T3BOARD05 Karsten…

Tip-a-friend - Header Injection

Component Type: Third party extension. The extension is not part of the TYPO3 default installation Affected Versions: 1.2.2 and earlier Vulnerability Type: Header Injection Severity: HIGH Problem…