Information Disclosure in Page Tree

Component Type: TYPO3 CMS Vulnerable subcomponent: Page Tree (ext:backend) Release Date: May 7, 2019 Vulnerability Type: Information Disclosure Affected Versions: 9.0.0-9.5.5 Severity: Medium…

Spider indexing (spiderindexing)

Simple algorithm for indexing site content with grouping on the types of information (!--TYPO3SEARCH_begin-- & !--TYPO3SEARCH_end--)

Show extension details Download ZIP of version 0.0.4

Meet Jens Liesegang, the TYPO3 Association's Lawyer

Luisa Faßbender sat down with Jens to learn more about him and what brought him to TYPO3. The interview took place on 25 May 2021 via Google Meet. Good morning Jens, nice to meet you! Who are you and…

Cross-Site Scripting in extension "Frontend Treeview" (mh_treeview)

Release Date: August 9, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Cross-Site Scripting Affected Versions: 0.1.0…

Vulnerability in TYPO3 Core

Component Type: TYPO3 Core Affected Versions: TYPO3 version 4.3.0 with enabled system extension "openid" Vulnerability Types: Authentication Bypass Overall Severity: High Release Date: January 14,…

TYPO3 Trademark Registered in India and Ukraine

To make sure that we have enough rights to do so, we also register our trademark worldwide. Last year we registered our trademark in India and in Ukraine to grow our reach worldwide. Read the…

Going for one last round

This was announced inside the team in October 2013 and published in the related meeting minutes, but I guess only a few people noticed that fact. Hence this more official although belated…

Prepare for your “Certified TYPO3 Integrator” exam with ease!

Participants will learn about the certification, what is tested and how it is tested. There will be an introduction to all the subjects covered in the certification and everybody will do a short mock…

Best Practices

The best practices team Our purpose We help TYPO3 developers build high-quality extensions. Our vision In order to build and hone our expertise, we research QA tools and best practices and try them out. We also share our knowledge with each other and…

Meet Stefan Busemann, Multi-talented TYPO3 Contributor, Germany (Application Podcast S02E06)

Listen to the full interview in the audio player here, watch the interview video below, where you’ll also find a full transcript of our conversation. Don’t forget to subscribe and send us your…

Thank you for the release of TYPO3 CMS 6.2

Dear Ernesto, dear TYPO3 CMS Team, dear contributors to the project, Every project is a risk that a team takes, but its also a promise and a reward for all involved. On behalf of the TYPO3 Association…

Insecure Unserialize in extension "Page path" (pagepath)

Release Date: July 7, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 1.0.3 and below Vulnerability Type:…

Visitors From the Symfony World Contribute To TYPO3 Documentation Search Frontend

You may already have read the article about the improvements to the search functionality at docs.typo3.org. However, the story of the look and feel hasn’t yet been told. It is a result of a…

Now in Effect: the New Code of Conduct

The Code of Conduct now applies to all persons present at or in the following: Official TYPO3 events Official TYPO3 community events (e.g. team sprints) Official TYPO3 communication platforms (e.g.…

Series of English Video Tutorials for Editors Completed

With 21 consecutive videos and one quick guide, Silke Arend, who has already produced the German videos for v4.2, now contributes the entire series in English. The videos are provided for free, in…

Information Disclosure in Password Reset

Component Type: TYPO3 CMS Subcomponent: Password Reset (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Information Disclosure Affected Versions: 10.4.0-10.4.1 Severity: Low Suggested…

Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:frontend) Release Date: May 12, 2020 Vulnerability Type: Information Disclosure Affected Versions: 9.5.12-9.5.16, 10.2.0-10.4.1 Severity:…

Translation Handling

Translation Handling Initiative Summary The main goal of this initiative is to simplify, improve and professionalize the process of translation in TYPO3 for all user groups. These groups include editors, integrators, developers, translators and…

Missing check for expiration time of password reset token for backend users

Component Type: TYPO3 CMS Subcomponent: Password Reset (ext:backend) Release Date: September 13, 2022 Vulnerability Type: Broken Access Control Affected Versions: 10.4.0-10.4.31, 11.0.0-11.5.15…

Image Rendering

Image Rendering Initiative Initiative focuses on improving how TYPO3 renders and processes images. Background Performance and flexibility in image processing and rendering was always a strong focus of TYPO3. With constantly changing technology, we…

TYPO3 present at FrOSCon open source conference

The conference revolves around a rich schedule of talks, highlighting current topics in Free Software and Open Source. Moreover, developers will be offered a large Free Software / Open Source space,…

T3CON13DE in Stuttgart a huge success

When TYPO3 community manager Ben van 't Ende wrapped up the conference he warmly thanked all of the 300 participants, speakers, sponsors and volunteers who had contributed. And there really is a lot…

TYPO3 Flow and TYPO3 Neos Workshops at T3BOARD13!

Just in time before Christmas we have a nice Gift for all T3BOARD13 participants! Robert Lemke will be at the Schmittehöhe with Flow and Neos in his snowboard-bag. Besides boarding, skiing and…

THEMES powered by Gridelements and Fluidcontent

For quite some time now people have been using Joey's Gridelements to speed up their backend experience and structure their content. At the same time there is also Kay's THEMES, which is inspired by…

Cross-Site Scripting in Form Framework validation handling

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11 and…