4. 

   Web Resource Restrictions

   Release Date: November 20, 2018 Component Type: Web server hosting environment Impact: Information disclosure of developer related resources Type: Advisory Problem Description The TYPO3 security team…

   Published: 20th November 2018 by Oliver Hader
5. 

   Cross-Site Scripting in extension "libconnect" (libconnect)

   Release Date: November 20, 2018 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Vulnerability Type: Multiple vulnerabilities Affected Versions:…

   Published: 20th November 2018 by Torben Hansen
6. 

   my.typo3.org becomes “my TYPO3”

   Contribution is the lifeblood for a community. The more and better quality contributions we have, the more our products and community can develop. So we are looking for new ways to increase the…

   Published: 14th November 2018
7. 

   Include TYPO3 autoinstallable package on hosting providers and XAMPP

   What is your idea about? People wanting to try TYPO3 have to figure how to install it themselves. Many other CMS'es are available as preinstalled or autoinstallable packages on popular hostings or…

   Published: 29th October 2018
8. 

   Making TER a proxy for git tags (or Packagist)

   What is your idea about? In order to reach a future vision about not hosting TYPO3 extensions for download via TER, a small amount of funding should be set aside to find a proper strategy - and if…

   Published: 29th October 2018 by Claus Due
9. 

   Fluid 3.0 development and workshop in Denmark

   What is your idea about? A two-part idea: have a developer workshop (3 days?) in Denmark, Aarhus area to prepare Fluid 3.0 which requires a lot of refactoring and carefully coordinated development…

   Published: 29th October 2018 by Claus Due
10. 

    Crazy Experimentation Fund

    What is your idea about? This is rather a long-shot but perhaps there may be interest in sponsoring some of the more "out there" experiments I (Claus Due) have been doing with TYPO3. The research I…

    Published: 29th October 2018 by Claus Due
11. 

    Arbitrary Code Execution via File List Module

    Component Type: TYPO3 CMS Vulnerable subcomponent: File List (ext:filelist) Release Date: January 22, 2019 Vulnerability Type: Arbitrary Code Execution Affected Versions: 8.0.0-8.7.22 and 9.0.0-9.5.3…

    Published: 22nd January 2019
12. 

    Cross-Site Scripting in Form Framework

    Component Type: TYPO3 CMS Vulnerable subcomponent: Form Framework (ext:form) Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.5.0-8.7.22 and 9.0.0-9.5.3…

    Published: 22nd January 2019
13. 

    Cross-Site Scripting in Bootstrap CSS toolkit

    Component Type: TYPO3 CMS Vulnerable subcomponent: 3rd party library Bootstrap CSS toolkit Release Date: January 22, 2019 Vulnerability Type: Cross-Site Scripting Affected Versions: 8.0.0-8.7.22 and…

    Published: 22nd January 2019