Postcards from TechSummer 2020

Check out the site TechSummer 2020 for a full list of talks. Videos: T3OCE 2020 Day 1 . Videos from the Saturday are available on YouTube. Well done to the organizing teams for putting together this…

T3DUST and T3UXW join forces

For 2014 two TYPO3 events regarding user experience and design of TYPO3 CMS and its packages are planned. One should as a follow up for the successful User eXperience Week, T3UXW09, and the other one…

Advice: Physical TYPO3 Association Meetings Are Possible Again

This page will be kept up-to-date with the current status of the Board’s advice. Feel free to return here to see the current status. Last updated: 14 February 2022, 14:30 CET Intended Audience This…

An Update on the TYPO3’s GitLab Project Template

Check Out the GitLab Project Template for TYPO3 Automated Setup The setup is now completely automated. The required DDEV add-ons are installed automatically along with the Composer and npm packages.…

Cross Site-Scripting in extension "Recommend page " (pb_recommend_page)

Release Date: November 07, 2017 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 2.0.3 and below Vulnerability Type:…

Extension Award 2021—Announcing the Winners

news by Georg Ringer typo3_console by Helmut Hummel container by Achim Fritz and Benni Mack We would like to congratulate the winners as well as all the extension authors who have supplied…

Information Disclosure of Installed Extensions

Component Type: TYPO3 CMS Vulnerable subcomponent: RequireJS package configuration Release Date: January 22, 2019 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.22 and…

Find TYPO3 (findtypo3)

findtypo3 extension is for searching the keyword, code or any text in all files of TYPO3. It also have custom options like search in fileadmin, typo3conf etc. Note : This will work only in Linux or…

Show extension details Download ZIP of version 1.0.1

Entering the final stage of the TYPO3 Inc. preparation - we need you!

As a result we have a first sort of beta candidate for the business plan. This final stage is to include all of your feedback in the best possible way. Therefor we will be pursuing two things:…

TYPO3 4.3 Beta 1

So, what's new in this release? General Integrated advanced Frontend Editing The Frontend Editing functionality was not touched for ages and had an outdated look and feel. The advanced Frontend…

Several Vulnerabilities in extension Formhandler (formhandler)

Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.4.0 and below Vulnerability Types: SQL Injection, Cross-Site…

Remote Command Execution and Remote File Disclosure vulnerability in extension pdf_generator2

Release Date: Oktober 20, 2011 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 0.21.0 and all versions below…

Potential Privilege Escalation

Component Type: TYPO3 CMS Subcomponent: eID API (ext:frontend, ext:core) Release Date: July 28, 2020 Vulnerability Type: Privilege Escalation, Remote Code Execution Affected Versions: 9.0.0-9.5.19,…

T3DD10: Workspace progress

As you might have already read on news.typo3.org a team was formed, that works on workspace improving it in several areas. TYPO3 Developer Days At T3DD10 a workshop about workspaces was held by Oliver…

An easy to use Extension Builder

What is your idea about? To solve the initial time needed to develop extensions, also to have an easy method for migrating data driven extensions, ability to reuse by cloning or re-use just part of a…

Include TYPO3 autoinstallable package on hosting providers and XAMPP

What is your idea about? People wanting to try TYPO3 have to figure how to install it themselves. Many other CMS'es are available as preinstalled or autoinstallable packages on popular hostings or…

Release candidates of stable TYPO3 CMS branches available

Today, the TYPO3 Community published release candidates of the three TYPO3 CMS stable versions. These are pre-releases for the upcoming releases: 4.5.26 4.7.11 6.0.5 In the past weeks - and especially…

Report from the Best Practices Team

The whole outcome, and current process, is available in the EXT:tea example extension on GitLab and GitHub . This report covers the biggest topics, not every single change. Becoming a Team and…

TYPO3 v10 End of Free Support Announcement

We published the first sprint release of the TYPO3 v10 release series in July 2019. Three consecutive releases followed, between October 2019 and February 2020, leading to the long-term support…

Budget 2022

Budget 2022 The budget of the TYPO3 Association is created yearly. During this process, the budget ideas are presented and discussed publicly. After this phase, the members of the TYPO3 Association are asked for their opinion in a poll. For 2022 the…

General Assembly and 25th Anniversary Celebration

Register for the TYPO3 General Assembly Some readers may not be aware of how the TYPO3 project works, so this article is an opportunity to explain its main aspects. The TYPO3 Association’s main…

Board Report—September 2020

The eight board members worked on a wide range of topics: Policies and regulations (e.g. for committees, teams, and travel) New membership types Contribution visualization and onboarding Communication…

End of life for TYPO3 4.2

The release of TYPO3 4.5 marks the end of the road for TYPO3 4.2. A final release (4.2.18) will take place in March. No further bugs nor security issues will be fixed after that point in this branch.…

Old2New Redirect (fb_old2new_redirect)

The extension redirects old url via HTTP code 301 (Moved permanently) to new pages in TYPO3. Additionally it handles 404 redirections within TYPO3.

Show extension details Download ZIP of version 1.0.1 Extension documentation

Denial of Service attack possibility in TYPO3 component Indexed Search

Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: Indexed Search Vulnerability Type: Denial of Service attack Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to…