Insecure Deserialization in Backend User Settings

Component Type: TYPO3 CMS Subcomponent: Backend User Interface (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Insecure Deserialization Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1…

Information Disclosure in Install Tool

Component Type: TYPO3 CMS Vulnerable subcomponent: Install Tool Release Date: December 11, 2018 Vulnerability Type: Information Disclosure Affected Versions: 7.0.0-7.6.31, 8.0.0-8.7.20 and 9.0.0-9.5.1…

Several Vulnerabilities in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: 4.4.0 up to 4.4.13, 4.5.0 up to 4.5.13, 4.6.0 up to 4.6.6 and development releases of the 4.7 and 6.0 branch. Vulnerability Types: Cross-Site Scripting,…

Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:core, ext:frontend) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11…

Being TYPO3 at the Transform Africa Summit, 2023

The conference was a great opportunity to develop new relationships and identify new opportunities for TYPO3 in Africa. It was also great to meet our friends from the government and private sector in…

Remote Code Execution in extension "Job portal" (psvneo_jobfair)

Release Date: April 26, 2022 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: "Job portal" (psvneo_jobfair) Vulnerability Type: Remote…

TYPO3 Initiative Week—Insider Report

24 participants from 8 initiatives met for 1 week in Festenburg, Oberharz, Germany to communicate, collaborate and connect with each other and bring TYPO3 initiatives to the next level. From the first…

HTML Injection in History Module

Component Type: TYPO3 CMS Subcomponent: History Module (ext:backend) Release Date: May 14, 2024 Vulnerability Type: HTML Injection Affected Versions: 13.0.0-13.1.0 Severity: Low Suggested CVSS:…

Cross-Site Scripting in TYPO3 Backend

Component Type: TYPO3 CMS Release Date: September 13, 2016 Vulnerability Type: Cross-Site Scripting Affected Versions: 6.2.0 to 6.2.26, 7.6.0 to 7.6.10 and 8.0.0 to 8.3.0 Severity: Low Suggested CVSS…

Information Disclosure in extension "UTOPIA" (ics_utopia)

Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.1 and below Vulnerability Type:…

Next Bug Day: April 29

Get your hands dirty with fixing bugs and issues in Git/Gerrit for the next TYPO3 version. I'm happy to announce that the next TYPO3 BugDay is coming up next week - on April 29th! For those who will…

The TYPO3 Community is ready for the Agency Meetup Day in Frankfurt.

The event is a combined initiative of the TYPO3 Marketing Team and of the Board of the TYPO3 Association. The Agency Meetup Day has on one hand the aim of collecting feature and product improvements…

Important Update: New Dates for T3CON24

We are excited about the TYPO3 Conference 2024 coming up at the end of November! Since announcing our original " Save the Date " for November 27-29, we've received important feedback from our…

Cross-Site Scripting in 3rd party library Flowplayer

Component Type: TYPO3 CMS Release Date: July 1, 2015 Vulnerable subcomponent: Frontend Media Rendering (ext:frontend, ext:mediace) Vulnerability Type: Cross-Site Scripting Affected Versions: Versions…

if20 Templates for TYPO3 (if_yaml)

TypoScript library for TYPO3, Template with tons of examples.

Show extension details Download ZIP of version 1.6.0 Extension documentation

TYPO3 at Linuxtag in Karlsruhe, Germany

The Linuxtag in Karlsruhe is sporting the appearance of two leading folks from the TYPO3 Associations this year: Kasper Skårhøj and Daniel Hinderink. So, if you plan to attend the Linuxtag, don't miss…

T3CON11: Call for Papers extended

The Call for Papers for this years TYPO3 Conference in Hanau, Germany (near Frankfurt am Main) has been extended by one week until 2011-08-07. If you missed the earlier deadline this is now your…

Job-Finder (job_finder)

Job finder extension including job listing, details, application, microdata and more - note there is a Pro version as well! See https://www.coding.ms/typo3-extensions/typo3-job-finder

Show extension details Download ZIP of version 5.1.0 Extension documentation

TYPO3 Flow and TYPO3 Neos Workshops at T3BOARD13!

Just in time before Christmas we have a nice Gift for all T3BOARD13 participants! Robert Lemke will be at the Schmittehöhe with Flow and Neos in his snowboard-bag. Besides boarding, skiing and…

This Month in TYPO3 - April 2020 - Issue #16

Every year the TYPO3 Core Development Team is heading for a new round of people responsible for merging code into TYPO3 Core's code basis . In April, Benni Mack (TYPO3 Project Lead) announced the Component Mergers and Framework Mergers who have…

This Week in TYPO3 (Week 3, 2014)

Week Ending: January 17, 2014 TYPO3 CMS Ernesto Baschny, who you all know by now as release manager of the current TYPO3 CMS version, warns us to fasten your seatbelts for beta 4 of TYPO3 CMS 6.2 LTS.…

Second edition of the International TYPO3 Developer Days

Only eight months after the first edition were the 5.0 dev-team was presented, we are happy to announce this years edition of the TYPO3 Developer Days. The second edition of this international TYPO3…

Multiple vulnerabilities in third party extensions

Release Date: January 13, 2010 Please read first: This Collective Security Bulletin (CSB) is a listing of vulnerable extensions with neither significant download numbers, nor other special importance…

TYPO3 4.2 Beta 1

So what's new? More polishing on the Cleaner Backend Project The Cleaner Backend Project has seen some important changes since TYPO3 4.2alpha3 was released only three weeks ago. The most obvious…

Growing Talent in the Job Market Desert

The call of businesses is strong and well-known—young tech talents are needed! But enticing a young audience to choose the path of IT and having them follow it isn’t a matter of throwing money around…