This Week in TYPO3 (Week 16, 2014)

Week ending April 18 This past week has been quiet just before Good Friday and the Easter weekend. I guess a good time to close of the first quarter of 2014 where we saw the release of TYPO3 CMS 6.2…

Multiple vulnerabilities in extension "mm_forum" (mm_forum)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: mm_forum (mm_forum) Vulnerability Type: Cross Site…

TYPO3 4.7 Beta1 released - Feature Freeze hit

Today the TYPO3 community released version 4.7 beta1 as the next step on our roadmap to the final release of 4.7, which will be released on April 24th, 2012. With releasing Beta1 we have reached…

TYPO3 CMS 7.1 Released - Home Improvement

Starting with 7.0, the TYPO3 CMS Team switched from the 6-month-release-cycle to a more agile approach in releasing more often - read more about this here . The overall goal for the CMS 7 development…

Being TYPO3 at the Transform Africa Summit, 2023

The conference was a great opportunity to develop new relationships and identify new opportunities for TYPO3 in Africa. It was also great to meet our friends from the government and private sector in…

Documentation Recap from the TYPO3 Fluid 3.0 Workshop

This article covers the Fluid 3.0 Workshop. Also, upcoming plans for Fluid are detailed. History and Current State Fluid is a standalone Template Engine for the web language PHP. It was initially…

Français

La TYPO3 Association participe à la création de l’Open Website Alliance Les organisations communautaires internationales derrière Drupal, Joomla, TYPO3 et WordPress s’allient en matière de leadership. Les membres de l’Alliance sont unis par leurs…

Environment Variable Injection in extension "Amazon Web Services SDK " (aws_sdk)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Environment Variable Injection Affected…

Insecure Deserialization in Backend User Settings

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Insecure Deserialization Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1…

Portfolios (portfolios)

Extension for displaying portfolios and references, with Bookmarks, Isotope, PDF-Generator and more - note there is a Pro version as well! See https://www.coding.ms/typo3-extensions/typo3-portfolios

Show extension details Download ZIP of version 4.1.7 Extension documentation

BE Auto IP Login (4.x and 6.x only) (sg_beiplogin)

Auto-Login by IP, if no Username/PW is given at BE-Login. Enter IP (or comma-separated IP-List without spaces) for BE User; make sure, that same IP(s) are NOT given to more than one BE-User. Then…

Show extension details Download ZIP of version 1.0.1

Grid Elements (gridelements)

Be part of the future of TYPO3! Support Gridelements now and unlock exclusive early access to Version 13! The well-established Gridelements Version 12 elevates TYPO3 by bringing grid-based layouts to…

Show extension details Download ZIP of version 12.0.0 Extension documentation

TYPO3 v9 Release Material

TYPO3 v9 Release Material Everything you need to promote TYPO3 v9 LTS. Here you'll find everything you need to make some noise about TYPO3 v9 LTS. Use presentation materials to prepare your company updates. Use the images to promote your Release…

Information Disclosure in Install Tool

Component Type: TYPO3 CMS Vulnerable subcomponent: Install Tool Release Date: December 11, 2018 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.31, 8.0.0-8.7.20 and 9.0.0-9.5.1…

Policy for Committees & Official Teams

TYPO3 Association Policy for Committees & Official Teams Please read Decision-Making Processes, Contribution and Participation to understand the terms Committees and Official Team. Goals of the Policy Clear definition of responsibilities Transparent…

Important Update: New Dates for T3CON24

We are excited about the TYPO3 Conference 2024 coming up at the end of November! Since announcing our original " Save the Date " for November 27-29, we've received important feedback from our…

Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:core, ext:frontend) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11…

PS3 Trophys (ps3trophys)

Manage PS3 Trophys in TYPO3.

Show extension details Download ZIP of version 0.1.2

Release of TYPO3 4.4alpha2 - Development Snapshot #2

We've included a bunch of small fixes, especially to our new ExtJS based Rich Text Editor htmlArea, big thanks to Stan Rolland. Also, a straightened out Extbase / Fluid combo is shipping with this…

Remote Code Execution in extension "Job portal" (psvneo_jobfair)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job portal" (psvneo_jobfair) Vulnerability Type: Remote…

Several Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.13, 4.5.0 up to 4.5.13, 4.6.0 up to 4.6.6 and development releases of the 4.7 and 6.0 branch. Vulnerability Types: Cross-Site Scripting,…

TYPO3 Initiative Week—Insider Report

24 participants from 8 initiatives met for 1 week in Festenburg, Oberharz, Germany to communicate, collaborate and connect with each other and bring TYPO3 initiatives to the next level. From the first…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: September 13, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 6.2.0 to 6.2.26, 7.6.0 to 7.6.10 and 8.0.0 to 8.3.0 Severity: Low Suggested CVSS…

Next Bug Day: April 29

Get your hands dirty with fixing bugs and issues in Git/Gerrit for the next TYPO3 version. I'm happy to announce that the next TYPO3 BugDay is coming up next week - on April 29th! For those who will…

Information Disclosure in extension "UTOPIA" (ics_utopia)

Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:…