Cross-Site Scripting in Link Handling

Component Type: TYPO3 CMS Subcomponent: Link Handling (ext:frontend) Release Date: May 12, 2020 Vulnerability Type: Information Disclosure Affected Versions: 9.5.12-9.5.16, 10.2.0-10.4.1 Severity:…

Accessible tables

Yes I told you so ;-) Rupert just published an extension for accessible tables. Martin Kutschker wrote: >> If you can live with fixed layouts like first-row-THs, first-col-THs, >>…

TYPO3 present at FrOSCon open source conference

The conference revolves around a rich schedule of talks, highlighting current topics in Free Software and Open Source. Moreover, developers will be offered a large Free Software / Open Source space,…

Meet Stefan Busemann, Multi-talented TYPO3 Contributor, Germany (Application Podcast S02E06)

Listen to the full interview in the audio player here, watch the interview video below, where you’ll also find a full transcript of our conversation. Don’t forget to subscribe and send us your…

Missing check for expiration time of password reset token for backend users

Component Type: TYPO3 CMS Subcomponent: Password Reset (ext:backend) Release Date: September 13, 2022 Vulnerability Type: Broken Access Control Affected Versions: 10.4.0-10.4.31, 11.0.0-11.5.15…

Press release TYPO3 Developer Days 2014

From June 19-22 the TYPO3 Developer Days will take place in The Netherlands in the Eindhoven region. It is the first time the Developer Days venture outside of the German speaking region. Switzerland…

Cross-Site Scripting in Form Framework validation handling

Component Type: TYPO3 CMS Subcomponent: Form Framework (ext:form) Release Date: December 17, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.29 and 9.0.0-9.5.11 and…

T3CON13DE in Stuttgart a huge success

When TYPO3 community manager Ben van 't Ende wrapped up the conference he warmly thanked all of the 300 participants, speakers, sponsors and volunteers who had contributed. And there really is a lot…

All TYPO3XDEV Extensions are now on forge!

As announced to all typo3xdev users, the SVN migration to forge happened this weekend. This means for every extension on typo3xdev a forge project was created, and everybody who filled out the…

Translation Handling

Translation Handling Initiative Summary The main goal of this initiative is to simplify, improve and professionalize the process of translation in TYPO3 for all user groups. These groups include editors, integrators, developers, translators and…

Image Rendering

Image Rendering Initiative Initiative focuses on improving how TYPO3 renders and processes images. Background Performance and flexibility in image processing and rendering was always a strong focus of TYPO3. With constantly changing technology, we…

Visitors From the Symfony World Contribute To TYPO3 Documentation Search Frontend

You may already have read the article about the improvements to the search functionality at docs.typo3.org. However, the story of the look and feel hasn’t yet been told. It is a result of a…

THEMES powered by Gridelements and Fluidcontent

For quite some time now people have been using Joey's Gridelements to speed up their backend experience and structure their content. At the same time there is also Kay's THEMES, which is inspired by…

Mysql profiler (mysqlprofiler)

An implementation of the mysql 5.0.37 profiling capabilities for Typo3. Just install, preview your site and check logs in typo3temp/tx_mysqlprofiler to find out where you could improve your queries

Show extension details Download ZIP of version 1.0.2

This Month in TYPO3 - March 2020 - Issue #15

This Month in TYPO3 - March 2020 - Issue #15 March was marked by the worldwide spread of the COVID-19 pandemic. Nevertheless the work on TYPO3 v10 LTS continued and some of the planned events took place online. Curated by Peter Kraume In This Issue…

Broken Access Control in Localization Handling

Component Type: TYPO3 CMS Vulnerable subcomponent: Localization Handling Release Date: January 22, 2019 Vulnerability Type: Broken Access Control Affected Versions: 8.0.0-8.7.22 Severity: Medium…

State of TYPO3 URL handling

Past Achievements The biggest obstacle in our mind was the limitation of multi-language pages. All page translations were previously stored in the database on "pages_language_overlay". This has been…

TYPO3 6.0 alpha3 released

Configuration and Bootstrap The bootstrap cleanup and refactoring of alpha2 allowed us to realize some broader changes we had in mind for a long time already in the configuration part of TYPO3. The…

Multiple vulnerabilities in civserv

Component Type: Third party extension. This extension is not part of the TYPO3 default installation Affected Versions: Version 4.2.4 and all versions below Vulnerability Type: XSS and SQL Injection…

TYPO3 v11 LTS—Warp Speed

Web technologies evolve at an incredible speed. So does TYPO3—the open-source content management system that powers websites and applications for organizations of all sizes. From small nonprofits to…

TYPO3 at OSCON

This has been the second year in a row, that TYPO3 was offered a free booth by the organizing Open Source supporters O'Reilly. Attendance at the booth was great and as always people left extremely…

Information Disclosure in Install Tool

Component Type: TYPO3 CMS Subcomponent: Install Tool (ext:install) Release Date: November 14, 2023 Vulnerability Type: Information Disclosure Affected Versions: 12.2.0-12.4.7 Severity: Low Suggested…

TYPO3 v9 LTS - You’re the One That I Want

Can’t make it to a release party? Tune into the live stream! Tuesday, 2 Oct 2018. 19:30 CEST Follow the live Q&A on Twitter. #9LTSQA Want to make some noise? Share what you love about #TYPO3LTS…

TYPO3 Phoenix and FLOW3 - August 2012

TYPO3 Phoenix Christian finished content type definitions for Phoenix, so we have a definite basic set of content types. Those differ slightly from what we used so far, which resulted in a migration…

FLOW3 1.0.0 Beta 1 Released

After eight months of hard work and 1457 change sets committed by 17 developers the FLOW3 core team is delighted to announce the release of FLOW3 1.0.0 beta 1. As usual, you'll find more detailed…