The TYPO3 Demo Project Meets Hebrew

One of TYPO3's main strengths is its multilingual capabilities. It is built with international audiences in mind. TYPO3 has long supported non-Latin character sets, for example Arabic, Chinese, and…

Help TYPO3 certification take the next step

It has been a while since we started our expedition to bring a certification program to the TYPO3 community. During a very rainy day in August 2006, somewhere in the south of Bavaria/Germany a bunch…

Cross-Site Scripting in TYPO3 Flow

Component Type: TYPO3 Flow Affected Versions: 1.1.0, 2.0.0 and current development branch. Release Date: December 10, 2013 Vulnerability Type: Cross-Site Scripting Severity: Medium Suggested CVSS…

TYPO3 slidedeck

TYPO3 Slidedeck Is giving presentations part of your daily work? For sales pitches, for educational purposes, or for any other purposes? We have good news for you! There’s one thing we’ve heard again and again at the annual Agency Meetup Days…

Release of TYPO3 4.4alpha2 - Development Snapshot #2

We've included a bunch of small fixes, especially to our new ExtJS based Rich Text Editor htmlArea, big thanks to Stan Rolland. Also, a straightened out Extbase / Fluid combo is shipping with this…

Next Bug Day: April 29

Get your hands dirty with fixing bugs and issues in Git/Gerrit for the next TYPO3 version. I'm happy to announce that the next TYPO3 BugDay is coming up next week - on April 29th! For those who will…

Spider indexing (spiderindexing)

Simple algorithm for indexing site content with grouping on the types of information (!--TYPO3SEARCH_begin-- & !--TYPO3SEARCH_end--)

Show extension details Download ZIP of version 0.0.4

Cross-Site Scripting in 3rd party library Flowplayer

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Frontend Media Rendering (ext:frontend, ext:mediace) Vulnerability Type: Cross-Site Scripting Affected Versions: Versions…

T3CON11: Call for Papers extended

The Call for Papers for this years TYPO3 Conference in Hanau, Germany (near Frankfurt am Main) has been extended by one week until 2011-08-07. If you missed the earlier deadline this is now your…

TypoScript in 45 Minutes

"Impossible!" is a common reaction on reading this headline. But the impossible is our goal. The DocTeam is currently working on a manual that shall allow everyone to understand TypoScript in only 45…

Second edition of the International TYPO3 Developer Days

Only eight months after the first edition were the 5.0 dev-team was presented, we are happy to announce this years edition of the TYPO3 Developer Days. The second edition of this international TYPO3…

BE Auto IP Login (4.x and 6.x only) (sg_beiplogin)

Auto-Login by IP, if no Username/PW is given at BE-Login. Enter IP (or comma-separated IP-List without spaces) for BE User; make sure, that same IP(s) are NOT given to more than one BE-User. Then…

Show extension details Download ZIP of version 1.0.1

Grid Elements (gridelements)

Be part of the future of TYPO3! Support Gridelements now and unlock exclusive early access to Version 13! The well-established Gridelements Version 12 elevates TYPO3 by bringing grid-based layouts to…

Show extension details Download ZIP of version 12.0.0 Extension documentation

TYPO3 at Linuxtag in Karlsruhe, Germany

The Linuxtag in Karlsruhe is sporting the appearance of two leading folks from the TYPO3 Associations this year: Kasper Skårhøj and Daniel Hinderink. So, if you plan to attend the Linuxtag, don't miss…

Information Disclosure possibility exploitable by Editors

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Filelist Module (ext:filelist, ext:core) Vulnerability Type: Information Disclosure Affected Versions: Versions 6.2.0 to…

Frontend login Session Fixation

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Frontend Login Vulnerability Type: Session Fixation Affected Versions: Versions 6.2.0 to 6.2.13, 7.0.0 to 7.3.0 Severity:…

Pre-announcement for important security update

Dear fellow TYPO3 enthusiast, we know you all are preparing for Christmas right now. We would therefore like to inform you in advance that you should be very awake and ready to do some maintenance on…

Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.2.11 and below, 4.3.1 and below Vulnerability Types: Authentication Bypass, Cross-Site Scripting (XSS), Information Disclosure Overall Severity: High…

TYPO3 CMS 8 LTS now available

Form builder TYPO3 now includes a mature and flexible form builder, enabling editors to create complex forms. The user friendly interface makes it possible to create multi-column field groups and…

Interview with Michael Stucki

Thomas: Hello Michael. For those of us who didn't know you already. Can you shortly introduce yourself and can you explain what your position in the TYPO3 community is? Michael: Hi Thomas. My name is…

TYPO3 Conference Wrap Up!

Making Fast Connections The atmosphere at Fokker Terminal was bright and fresh. There was so much natural light filling the space, with plenty of coffee and tea available, and places to congregate and…

Cross Site Scripting in extension "Instagram" (ws_instagram)

Release Date: May 07, 2019 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross Site Scripting Affected Versions: 1.0.1 and…

Information Disclosure in User Authentication

Component Type: TYPO3 CMS Vulnerable subcomponent: User Authentication (ext:core) Release Date: May 7, 2019 Vulnerability Type: Information Disclosure Affected Versions: 9.0.0-9.5.5 Severity: Medium…

Information Disclosure in Page Tree

Component Type: TYPO3 CMS Vulnerable subcomponent: Page Tree (ext:backend) Release Date: May 7, 2019 Vulnerability Type: Information Disclosure Affected Versions: 9.0.0-9.5.5 Severity: Medium…

Marketing Team Meeting October 15th

The participants were: Alain Veuve, Berit Hlubek, Jochen Stange, Christian Händel, Patrick Lobacher, Ben van 't Ende, Boris Hinzer and Christopher Knapp The basic idea of the sprint evolved due to the…