Multiple vulnerabilities in extension "mm_forum" (mm_forum)

Release Date: July 07, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: mm_forum (mm_forum) Vulnerability Type: Cross Site…

Release of TYPO3 4.4alpha2 - Development Snapshot #2

We've included a bunch of small fixes, especially to our new ExtJS based Rich Text Editor htmlArea, big thanks to Stan Rolland. Also, a straightened out Extbase / Fluid combo is shipping with this…

TYPO3 v9 Release Material

TYPO3 v9 Release Material Everything you need to promote TYPO3 v9 LTS. Here you'll find everything you need to make some noise about TYPO3 v9 LTS. Use presentation materials to prepare your company updates. Use the images to promote your Release…

Environment Variable Injection in extension "Amazon Web Services SDK " (aws_sdk)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Environment Variable Injection Affected…

Insecure Deserialization in Backend User Settings

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Insecure Deserialization Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1…

BE Auto IP Login (4.x and 6.x only) (sg_beiplogin)

Auto-Login by IP, if no Username/PW is given at BE-Login. Enter IP (or comma-separated IP-List without spaces) for BE User; make sure, that same IP(s) are NOT given to more than one BE-User. Then…

Show extension details Download ZIP of version 1.0.1

Grid Elements (gridelements)

Be part of the future of TYPO3! Support Gridelements now and unlock exclusive early access to Version 13! The well-established Gridelements Version 12 elevates TYPO3 by bringing grid-based layouts to…

Show extension details Download ZIP of version 12.0.0 Extension documentation

Several Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.13, 4.5.0 up to 4.5.13, 4.6.0 up to 4.6.6 and development releases of the 4.7 and 6.0 branch. Vulnerability Types: Cross-Site Scripting,…

Information Disclosure in Install Tool

Component Type: TYPO3 CMS Vulnerable subcomponent: Install Tool Release Date: December 11, 2018 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.31, 8.0.0-8.7.20 and 9.0.0-9.5.1…

TYPO3 Initiative Week—Insider Report

24 participants from 8 initiatives met for 1 week in Festenburg, Oberharz, Germany to communicate, collaborate and connect with each other and bring TYPO3 initiatives to the next level. From the first…

Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:core, ext:frontend) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11…

The Circle of Life: Plan, Do, Check, Act, Repeat for the TYPO3 Project

The Product Strategy Group would like to make contribution easier. Contribution to a large open source project like ours is difficult, unless you know where your contribution belongs, who to talk to,…

Portfolios (portfolios)

Extension for displaying portfolios and references, with Bookmarks, Isotope, PDF-Generator and more - note there is a Pro version as well! See https://www.coding.ms/typo3-extensions/typo3-portfolios

Show extension details Download ZIP of version 4.1.7 Extension documentation

Bringing Czech to TYPO3: My Translation Journey

I’ve been working actively with TYPO3 for around seven years, but I never imagined I’d one day have my fingerprints on almost every word of its user interface. In the Czech Republic, there used to be…

Being TYPO3 at the Transform Africa Summit, 2023

The conference was a great opportunity to develop new relationships and identify new opportunities for TYPO3 in Africa. It was also great to meet our friends from the government and private sector in…

Remote Code Execution in extension "Job portal" (psvneo_jobfair)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job portal" (psvneo_jobfair) Vulnerability Type: Remote…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: September 13, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 6.2.0 to 6.2.26, 7.6.0 to 7.6.10 and 8.0.0 to 8.3.0 Severity: Low Suggested CVSS…

Information Disclosure in extension "UTOPIA" (ics_utopia)

Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:…

Next Bug Day: April 29

Get your hands dirty with fixing bugs and issues in Git/Gerrit for the next TYPO3 version. I'm happy to announce that the next TYPO3 BugDay is coming up next week - on April 29th! For those who will…

PS3 Trophys (ps3trophys)

Manage PS3 Trophys in TYPO3.

Show extension details Download ZIP of version 0.1.2

The TYPO3 Community is ready for the Agency Meetup Day in Frankfurt.

The event is a combined initiative of the TYPO3 Marketing Team and of the Board of the TYPO3 Association. The Agency Meetup Day has on one hand the aim of collecting feature and product improvements…

Cross-Site Scripting in 3rd party library Flowplayer

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Frontend Media Rendering (ext:frontend, ext:mediace) Vulnerability Type: Cross-Site Scripting Affected Versions: Versions…

HTML Injection in History Module

Component Type: TYPO3 CMS Subcomponent: History Module (ext:backend) Release Date: May 14, 2024 Vulnerability Type: HTML Injection Affected Versions: 13.0.0-13.1.0 Severity: Low Suggested CVSS:…

TYPO3 at Linuxtag in Karlsruhe, Germany

The Linuxtag in Karlsruhe is sporting the appearance of two leading folks from the TYPO3 Associations this year: Kasper Skårhøj and Daniel Hinderink. So, if you plan to attend the Linuxtag, don't miss…

This Week in TYPO3 (Week 3, 2014)

Week Ending: January 17, 2014 TYPO3 CMS Ernesto Baschny, who you all know by now as release manager of the current TYPO3 CMS version, warns us to fasten your seatbelts for beta 4 of TYPO3 CMS 6.2 LTS.…