Report From the eGovernance Conference in Tartu, Estonia

After great outcomes from last year’s eGovernance Conference , in the Estonian capital, Tallinn, I was very much looking forward to this year’s event. The host city was no longer Tallinn, but the 2024…

Build-Your-Own Starship Enterprise — Reflections on DrupalCon Portland 2024

Other communities have taken different paths toward similar goals as our own. I had the privilege of giving — and getting — outside perspectives on Drupal and TYPO3 once again at the 2024 North…

Cross-Site Scripting in extension "Extension Kickstarter" (kickstarter)

Release Date: March 03, 2016 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: version 0.5.3 and below Vulnerability Type:…

Cross-Site Scripting in TYPO3 component CSS styled content

Component Type: TYPO3 CMS Release Date: February 23, 2016 Vulnerable subcomponent: CSS styled content Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.18 and 7.6.0 to…

Cross-Site Scripting in link validator component

Component Type: TYPO3 CMS Release Date: February 16, 2016 Vulnerable subcomponent: link validator Vulnerability Type: Cross-Site Scripting Affected Versions: Versions 6.2.0 to 6.2.17 and 7.6.0 to…

Cross-Site Scripting in Form Engine

Component Type: TYPO3 CMS Subcomponent: Form Engine (ext:backend) Release Date: May 12, 2020 Vulnerability Type: Cross-Site Scripting Affected Versions: 9.0.0-9.5.16, 10.0.0-10.4.1 Severity: Medium…

Sensitive Data Exposure in extension "Job Fair" (jobfair)

Release Date: May 12, 2020 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Component: Job Fair (ext:jobfair) Vulnerability Type: Sensitive Data…

TYPO3 in the Cloud – User Group meets Microsoft

Topics of the meeting are TYPO3 in the cloud with Microsoft Azure and Platform.sh, the Microsoft Cloud Germany and the new Form Framework in TYPO3 8.5. Microsoft and open source Microsoft has…

TYPO3 Summer of Code 2012 - it happens!

I wrote down some basic rules and a roadmap for the summer in the wiki on http://wiki.typo3.org/T3soc2012 . Now it's your turn to hand in a project proposal. We are really looking forward to it. Basic…

Caching at TYPO3.org

Yesterday night we finally upgraded TYPO3.org to version 3.8.0. Because we had to clear all caches, including the indexed_search cache, the pages were rendered quite slowly in the time following.…

TYPO3 Hyphenator (xrhyphen)

Adds Hyphenation-Functions to TYPO3. To use this extension simply install it and add the static template "TYPO3 Hyphenation (xrhyphen)" to your root-page. Special thanks to the developers of the…

Show extension details Download ZIP of version 1.0.0

Insufficient Session Expiration in Admin Tool

Component Type: TYPO3 CMS Subcomponent: Admin Tool (ext:install) Release Date: June 14, 2022 Vulnerability Type: Broken Access Control Affected Versions: 9.0.0-9.5.34 ELTS, 10.0.0-10.4.28,…

This Month in TYPO3: November, 2024 [Issue #19]

We also marked the end of free support for TYPO3 v11 LTS, ensuring users have the best security and features with v12 and v13. Lastly, the calendar is brimming with exciting events to end the year on…

The new frontend editing for TYPO3

For us as TYPO3 Core team, Frontend Editing plays an important part for the ease-of-use for TYPO3. It adds a missing piece which has been neglected for too long. On the other hand, the source code of…

Remote Code Execution in third party library swiftmailer

Component Type: TYPO3 CMS Release Date: January 3, 2017 Vulnerability Type: Remote Code Execution Affected Versions: 6.2.0 to 6.2.29, 7.6.0 to 7.6.14 and 8.0.0 to 8.5.0 Severity: Low Suggested CVSS…

Social media buttons (social_media_buttons)

Embed the customised Social Media Buttons, like Facebook, Twitter, YouTube, Google Plus, Linkedin and Pinterest to your Website. Add Simple Social Buttons to your website and multiply your…

Show extension details Download ZIP of version 1.1.6 Extension documentation

Insecure Deserialization in TYPO3 CMS

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend & Core API (ext:backend, ext:core) Release Date: June 25, 2019 Vulnerability Type: Insecure Deserialization Affected Versions: 8.0.0-8.7.26…

Information Disclosure in Backend User Interface

Component Type: TYPO3 CMS Vulnerable subcomponent: Backend User Interface (ext:backend) Release Date: June 25, 2019 Vulnerability Type: Information Disclosure Affected Versions: 8.0.0-8.7.26 and…

Business Control Committee

The Business Control Committee (BCC) The BCC monitors the Association's activities and finances. The Business Control Committee is elected by the Association's Members at the General Assembly . It works to increase transparency. It manages budgets…

Report on the typo3.org Team Sprint in India (March 2019)

What a great adventure. For the first time I was visiting Asia and especially India. As I am not a fan of flights and Asian food, this took quite some effort to convince me. But I can give you a…

Vulnerabilitiy in extension Front End User Registration (sr_feuser_register)

Component Type: Third party extension. This extensions is not part of the TYPO3 default installation. Affected Versions: Version 2.5.25. Vulnerability Type: Security Misconfiguration Severity: Medium…

Budget 2024 Ideas for Quarter 3/2024 Published — Vote Now!

On 1 November, we launched the community budget process for 2024 with a call for budget ideas. The ideas are now published at talk.typo3.org , where you can review and discuss them . As a part of the…

TER2 - Save your private extensions!

With the release of TYPO3 4.0 coming nearer, the TYPO3.org team now starts preparing the deployment of the new Extension Repository. The TER2 offers many new features and will improve speed and…

Introducing academic memberships

TYPO3 has long been the CMS of choice for academic institutions around the world. Only in Germany, some 460 public and private university websites are powered by the CMS. Academic memberships are…

TYPO3 Association extraordinary General Assembly

With the new bylaws now in effect the following changes are the most important to mention: 1. We introduced a new committee called the Business Control Committee (BCC) which is elected directly by the…