Initiative Report 1/2019

The dashboard initiative is still in an early phase, basic concepts and goals are being defined, organisational stuff is being taken care of. See Dashboard Initiative The persistence initiative is…

Initiatives

TYPO3 Core Development - Strategic Initiatives An “initiative” consists of people with a common interest to make long-term improvements in a specific area of TYPO3 including strategic plans, goals, task-breakdown and monitoring of progress. These…

Ink responsive HTML email (cb_ink)

Integrates Ink responsive HTML emails (from Zurb) to TYPO3. Also includes CSS inliner and HTML to text converter.

Show extension details Download ZIP of version 1.0.1 Extension documentation

Inline Relational Record Editing (IRRE)

The functionality of Inline Relational Record Editing is shown in this diploma thesis using a case-study of a travel business which provides bookings for many hotels. A hotel consists of different…

Insecure Deserialization & Arbitrary Code Execution in TYPO3 CMS

Component Type: TYPO3 CMS Release Date: July 12, 2018 Vulnerability Type: Insecure Deserialization & Arbitrary Code Execution Affected Versions: 7.0.0 to 7.6.29, 8.0.0 to 8.7.16 and 9.0.0 to 9.3.0…

Insecure Deserialization in Backend User Settings

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Insecure Deserialization Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1…

Insecure Deserialization in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend & Core API (ext:backend, ext:core) Release Date: June 25, 2019 Vulnerability Type: Insecure Deserialization Affected Versions: 8.0.0-8.7.26…

Insecure Deserialization in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Form Framework (ext:form) Release Date: July 12, 2018 Vulnerability Type: Insecure Deserialization Affected Versions: 8.5.0 to 8.7.16 and 9.0.0 to…

Insecure Direct Object Reference in extension "Content Consent" (content_consent)

Release Date: December 13, 2023 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Content Consent" (content_consent) Composer Package…

Insecure Direct Object Reference in extension "Download manager" (reint_downloadmanager)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Download manager" (reint_downloadmanager) Composer Package…

Insecure Direct Object Reference in extension "femanager" (femanager)

Release Date: May 20, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "femanager" (femanager) Composer Package Name:…

Insecure Direct Object Reference in extension "femanager" (femanager)

Release Date: July 22, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: femanager (femanager) Composer Package Name:…

Insecure Direct Object Reference in extension "powermail" (powermail)

Release Date: September 17, 2024 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "powermail" (powermail) Composer Package Name:…

Insecure Direct Object Reference in extension "powermail" (powermail)

Release Date: July 22, 2025 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "powermail" (powermail) Composer Package Name:…

Insecure Unserialize in extension "Page path" (pagepath)

Release Date: July 7, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.3 and below Vulnerability Type:…

Insecure Unserialize Vulnerability in FLOW3

Component Type: FLOW3 Affected Versions: 1.0, master Release Date: March 28, 2012 Vulnerability Type: Insecure unserialize Severity: Medium Suggested CVSS v2.0:…

Insecure Unserialize and SQL Injection in extension "Code Highlighter" (mh_code_highlighter)

Release Date: November 14, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.2.10 and below Vulnerability Type:…

Insecure Unserialize in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: November 22, 2016 Vulnerable subcomponent: Backend Vulnerability Type: Insecure Unserialize Affected Versions: Versions 6.2.0 to 6.2.28, 7.6.0 to 7.6.12 and…

Insecure Unserialize in TYPO3 Import/Export

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerable subcomponent: Import/Export Vulnerability Type: Insecure Unserialize Affected Versions: Versions 6.2.0 to 6.2.25, 7.6.0 to 7.6.9 and…

Insecure Unserialize in extension News (tt_news)

Release Date: February 12, 2014 Bulletin update: September 18, 2014 (added CVE) Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected…

Insecure direct object reference in extension "Varnishcache" (varnishcache)

Release Date: February 15, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Varnishcache" (varnishcache) Vulnerability Type:…

Inside TYPO3 (doc_core_inside)

Now available at http://docs.typo3.org/typo3cms/InsideTypo3Reference/

Show extension details Download ZIP of version 4.2.1 Extension documentation

Inside TYPO3 - December 2024: T3CON Special

Inside TYPO3 - March 2025: TYPO3 Board Elections

Inside TYPO3 - November 2024