Update on recent typo3.org issue

Dear user of typo3.org, after a while of (almost) non-stop activity by members of the security team as well as the core team and the folks from punkt.de the front user login on typo3.org has been…

TYPO3 4.7 Beta1 released - Feature Freeze hit

Today the TYPO3 community released version 4.7 beta1 as the next step on our roadmap to the final release of 4.7, which will be released on April 24th, 2012. With releasing Beta1 we have reached…

TYPO3 v9 Release Material

TYPO3 v9 Release Material Everything you need to promote TYPO3 v9 LTS. Here you'll find everything you need to make some noise about TYPO3 v9 LTS. Use presentation materials to prepare your company updates. Use the images to promote your Release…

Browser Manual (en) (browser_manual_en)

Publish your data in list and single views and in maps! You dont need neither any own plugin nor any line PHP code. The Browser - TYPO3 without PHP - provides an index browser (a-z), a page browser, a…

Show extension details Download ZIP of version 7.3.1 Extension documentation

TYPO3 Initiative Week—Insider Report

24 participants from 8 initiatives met for 1 week in Festenburg, Oberharz, Germany to communicate, collaborate and connect with each other and bring TYPO3 initiatives to the next level. From the first…

T3BOARD12 registration starts in 5 minutes

Get a place on the T3BOARD12 in Laax! Registration starts in 5 minutes on association.typo3.org Registration: http://association.typo3.org/index.php?id=563

Information Disclosure in Install Tool

Component Type: TYPO3 CMS Vulnerable subcomponent: Install Tool Release Date: December 11, 2018 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.31, 8.0.0-8.7.20 and 9.0.0-9.5.1…

Extbase Category Example (infochy_cat)

https://wiki.typo3.org/TYPO3_6.0Adding_categories_to_own_models_using_Extension_Builder

Show extension details Download ZIP of version 0.0.2 Extension documentation

Insecure Deserialization in Backend User Settings

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Insecure Deserialization Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1…

Bug Day coming up this Friday, Oct 31st

Since it was introduced in June Bug Day has been a huge success every month. This is a reminder for all interested developers and users to join us during Bug Day this Friday, October 31st. This Bug…

This Month in TYPO3 - April 2020 - Issue #16

Every year the TYPO3 Core Development Team is heading for a new round of people responsible for merging code into TYPO3 Core's code basis . In April, Benni Mack (TYPO3 Project Lead) announced the Component Mergers and Framework Mergers who have…

Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:core, ext:frontend) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11…

Environment Variable Injection in extension "Amazon Web Services SDK " (aws_sdk)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Environment Variable Injection Affected…

Multiple vulnerabilities in third party extensions

Release Date: January 13, 2010 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

Growing Talent in the Job Market Desert

The call of businesses is strong and well-known—young tech talents are needed! But enticing a young audience to choose the path of IT and having them follow it isn’t a matter of throwing money around…

This Week in TYPO3 (Week 3, 2014)

Week Ending: January 17, 2014 TYPO3 CMS Ernesto Baschny, who you all know by now as release manager of the current TYPO3 CMS version, warns us to fasten your seatbelts for beta 4 of TYPO3 CMS 6.2 LTS.…

Standardization of TYPO3 Documentation—May 2022

In the past, creating full documentation for a TYPO3 project often started with copying and adapting the basic file structure of an existing set of documentation. Since creating documentation is not…

TYPO3 4.2 Beta 1

So what's new? More polishing on the Cleaner Backend Project The Cleaner Backend Project has seen some important changes since TYPO3 4.2alpha3 was released only three weeks ago. The most obvious…

WiRo Redmine Tracker (wiro_redmine_tracker)

This extension allows you to show a Redmine Tracker in TYPO3. No big deal - only a module in the TYPO3-Backend.

Show extension details Download ZIP of version 2.0.0 Extension documentation

Budget Ideas for Quarter 1/2025 Published — Vote Now!

In 2024, we launched the community budget process with a call for budget ideas. The new ideas are now published at talk.typo3.org, where you can review and discuss them . As a part of the democratic…

Remote Code Execution in extension "Job portal" (psvneo_jobfair)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job portal" (psvneo_jobfair) Vulnerability Type: Remote…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: September 13, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 6.2.0 to 6.2.26, 7.6.0 to 7.6.10 and 8.0.0 to 8.3.0 Severity: Low Suggested CVSS…

Report on the typo3.org Team Sprint in Düsseldorf (Jun 2018)

Next steps Our next sprint in September will focus at my.typo3.org. We want add personal profile pages and introduce unified data listings (members, certifications) at typo3.org. Participants of the…

Information Disclosure in extension "UTOPIA" (ics_utopia)

Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:…

The TYPO3 Community is ready for the Agency Meetup Day in Frankfurt.

The event is a combined initiative of the TYPO3 Marketing Team and of the Board of the TYPO3 Association. The Agency Meetup Day has on one hand the aim of collecting feature and product improvements…