SQL Injection in extension "Event Calender" (pits_wd_calender)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: SQL Injection Affected Versions: 6.0.0 and below…

Cross Site Scripting in extension "gkh RSS Import" (gkh_rss_import)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross Site Scripting Affected Versions: 5.0.0 and…

Developer Days 2017: Registration has opened

More information • Register now This year's Developer Days will take place in Malmö, Sweden. Enjoy three fantastic days at Quality Hotel™ View in Malmö, Sweden. Meet TYPO3 developers from around the…

TYPO3 v9.3.0 released

The outstanding aspects of the 4th sprint release are SEO features "out of the box", new options to make it easy to comply with GDPR and added support for stronger password hashing functions, which…

The first 100 Days of the T3A Expert Advisory Board

Defining the Schedule The new bylaws introduce a whole new process of budgeting. 2013's budget is not decided anymore by the T3A board and the T3A steering committee (which doesn't exist anymore), but…

Released TYPO3 4.7 beta2

The TYPO3 community released TYPO3 4.7 beta2 as the next step on our roadmap to the final release of 4.7.0, which will be released on April 24th, 2012. With the release of beta1 we have reached…

Performance & Scalability

Performance & Scalability TYPO3 improves audience retention and customer conversion rates by delivering content to your audience faster. PHP Version 8.0 Introduced in version 11.3 The TYPO3 Core is now compatible with PHP version 8.0. This PHP…

Information Disclosure in User Authentication

Component Type: TYPO3 CMS Subcomponent: User Authentication (ext:core) Release Date: July 20, 2021 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.51 ELTS, 8.0.0-8.7.40 ELTS,…

T3CON11 – a Brief Recap

The seventh international TYPO3 conference just wound up, and as expected, T3CON11 was a blast. Over 370 visitors from thirteen countries came together in Frankfurt, Germany to hear about, learn…

Mysql profiler (mysqlprofiler)

An implementation of the mysql 5.0.37 profiling capabilities for Typo3. Just install, preview your site and check logs in typo3temp/tx_mysqlprofiler to find out where you could improve your queries

Show extension details Download ZIP of version 1.0.2

TYPO3 Association seeks Executive Secretary

In our vision of being a better organisation that facilitates the TYPO3 Community, we decided that we need someone who is always available to serve the community and the Association members. Someone…

Bug Day coming up this Friday, Oct 31st

Since it was introduced in June Bug Day has been a huge success every month. This is a reminder for all interested developers and users to join us during Bug Day this Friday, October 31st. This Bug…

This Week in TYPO3 (2015, Week 5)

Week ending February 1 TYPO3 Association The TYPO3 Association announces the upcoming elections . The TYPO3 Association consists of three separate bodies, the board the expert advisory board and the…

Arbitrary Code Execution in extension Job Fair (jobfair)

Release Date: June 15, 2015 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.0 and below Vulnerability Type:…

Marketing Team Meeting January, 22nd

After a successful 2013 with as a highlight the Marketing Sprint, including the communication workshop, we are looking forward to continue our efforts in 2014. The marketing team agenda for the day…

Update on recent typo3.org issue

Dear user of typo3.org, after a while of (almost) non-stop activity by members of the security team as well as the core team and the folks from punkt.de the front user login on typo3.org has been…

Debug Mysql or other DB (debug_mysql_db)

Extends \TYPO3\CMS\Core\Database\DatabaseConnection and \TYPO3\CMS\Core\Database\Connection to show Errors and Debug-Messages. Debugging of sql-queries by debug and FileWriter.

Show extension details Download ZIP of version 1.9.1 Extension documentation

All TYPO3XDEV Extensions are now on forge!

As announced to all typo3xdev users, the SVN migration to forge happened this weekend. This means for every extension on typo3xdev a forge project was created, and everybody who filled out the…

Browser Manual (en) (browser_manual_en)

Publish your data in list and single views and in maps! You dont need neither any own plugin nor any line PHP code. The Browser - TYPO3 without PHP - provides an index browser (a-z), a page browser, a…

Show extension details Download ZIP of version 7.3.1 Extension documentation

Broken Access Control in extension "gForum" (g_forum)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: gForum (ext:g_forum) Vulnerability Type: Broken Access…

Cross-Site Scripting in TYPO3 Flow

Component Type: TYPO3 Flow Affected Versions: 1.1.0, 2.0.0 and current development branch. Release Date: December 10, 2013 Vulnerability Type: Cross-Site Scripting Severity: Medium Suggested CVSS…

FLOW3 1.0.0 Beta 1 Released

After eight months of hard work and 1457 change sets committed by 17 developers the FLOW3 core team is delighted to announce the release of FLOW3 1.0.0 beta 1. As usual, you'll find more detailed…

Data Privacy and GDPR

Data Privacy and GDPR Improved User’s Privacy with SameSite Cookies Introduced in version 10.3 We cannot stress this enough — in fact I think we have mentioned it in almost every release announcement article over the last few years — security is one…

Licenses

TYPO3’s Open Source Licenses The TYPO3 project, represented by the TYPO3 Association , uses different licenses for the distribution of software and documentation, and contributions from individuals and corporations. We chose to use those licenses…

HTML Injection in History Module

Component Type: TYPO3 CMS Subcomponent: History Module (ext:backend) Release Date: May 14, 2024 Vulnerability Type: HTML Injection Affected Versions: 13.0.0-13.1.0 Severity: Low Suggested CVSS:…