Team leader meeting March 2018

The budget numbers will be created until next week. Once this happened, we will add all data to our reimbursement tool ( https://reimbursement.typo3.com). The usage of this tool will be mandatory.…

Single-Signon for bugs.typo3.org

The time is finally over that you need an extra login for every galaxy in the TYPO3 universe. As a first step, we enabled the so-called single-signon service for bugs.typo3.org. At the first visit of…

GitLab’s Built-In TYPO3 Project Template

Using the new template is easy: Just create a new project and select Create from template . GitLab will show a list of available templates. Locate the TYPO3 Distribution and hit the Use Template…

Several Vulnerabilities in extension MailformPlus (th_mailformplus)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.0.15 and below Vulnerability Types: Cross-Site Scripting Severity:…

TYPO3 Developer Days 2013 in Hamburg (T3DD13) - Ticket sale starts!

This year we will have 175 places for T3DD13. On April 2 the first 100 tickets will be up for sale. The second batch of 75 tickets will be released on May 15. People who are on a holiday the coming…

TYPO3 Security Bulletin

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.9.0 and all versions below Vulnerability Type: Information…

Nomination for TYPO3 Awards on the Snowboard Tour

Nomination period for the 2008 TYPO3 Awards open until 3rd March "We have been taking nominations for two weeks now and are in the final stretch. Please help fill up the nominations in all the…

Multiple vulnerabilities in third party extensions

Release Date: August 18, 2009 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

WebTemplate, View default TS (tstemplate_viewdefault)

Displays the default TypoScript stored in the global vars $GLOBALS["TYPO3_CONF_VARS"]["FE"]["defaultTypoScript_constants"] and $GLOBALS["TYPO3_CONF_VARS"]["FE"]["defaultTypoScript_setup"]

Show extension details Download ZIP of version 0.0.4

Release parties for TYPO3 version 4.6

TYPO3 version 4.6 is right around the corner, slated for release on October 25. We want you to celebrate this release with us! TYPO3 version 4.6 will include features that have been back ported from…

SQL Injection in fechangepassword

Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: Version 2.1.2 and all versions below Vulnerability Type: SQL Injection Severity:…

Cross-Site Scripting in <f:asset.css> view helper

Component Type: TYPO3 CMS Subcomponent: Fluid (ext:fluid) Release Date: September 13, 2022 Vulnerability Type: Cross-Site Scripting Affected Versions: 10.3.0-10.4.31, 11.0.0-11.5.15 Severity: Medium…

Report of the QSA 3-2018

This meeting was held as a working sprint. We set up smaller working groups, to create concrete results. As usual we started with a short recap of our activities of the last month and compared the…

Security issue in third party TYPO3 extension "phpMyAdmin" (phpmyadmin)

For further information on the issue in the extension "phpMyAdmin" (phpmyadmin), please read the related advisory TYPO3-SA-2010-017 that was published today:…

Security issue in third party TYPO3 extension "phpMyAdmin" (phpmyadmin)

For further information on the issue in the extension "phpMyAdmin" (phpmyadmin), please read the related advisory TYPO3-SA-2010-014 that was published today:…

Marketing Sprint—A vision for 2021

Join the Next TYPO3 Online Marketing Sprint Q4/2020 About the Sprint In this sprint, we held open-ended discussions. This was in contrast to the past marketing sprints in which we were still somewhat…

Cross-Site Scripting in third party library mso/idna-convert

Component Type: TYPO3 CMS Release Date: July 19, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 7.6.0 to 7.6.9 and 8.0.0 to 8.2.0 Severity: Low Suggested CVSS v2.0:…

th_mailformplus

Component Type: Third Party Extension. This extension is third party code that has not been submitted to the TYPO3 extension review process yet. The extension is not part of TYPO3 default…

TYPO3 conference ticket sale specials

The TYPO3 conference for this year is taking place in Stuttgart from October 29-31 and covers three different main topics: Business, Community and Future. What makes the conference special this year…

Several vulnerabilities in third party extensions

Release Date: February 19, 2013 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

Marketing Meeting October 17, 2012

We realise the marketing team was not always that visible. We already had a project page on Forge that wasn´t public. We have now divided our marketing project in a non-public and public part, in the…

Code Execution in TYPO3 Install Tool

Component Type: TYPO3 CMS Subcomponent: Install Tool (ext:install) Release Date: February 13, 2024 Vulnerability Type: Code Execution Affected Versions: 8.0.0-8.7.56, 9.0.0-9.5.45, 10.0.0-10.4.42,…

T3N Magazine releases three current TYPO3-Articles in English (October 2008)

The topics this time include an article about the first steps with TYPO3, a look inside four TYPO3-Shop-Extensions and an Extension Comparison of different Download Solutions with an extra overview of…

Rebooting the Content Group

To RSVP, join the #t3a-content-group in TYPO3 Slack . Read more about the Content Group . We keep the TYPO3 community updated on all the exciting developments and events in the TYPO3 universe. Here’s…

Vote now for the Board and the BCC of the TYPO3 Association

Every year, half of the staff of the TYPO3 Association Board and Business Control Committee (BCC) are up for reelection. This ensures that operations run smoothly at all times. The Board of the TYPO3…