TYPO3-EXT-SA-2022-015: Broken Access Control in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control.
UX and TYPO3—the Challenges for the Next Five Years
During the T3DD22, Annett Jähnichen and Rachel Foucard presented the TYPO3 UX Team and its work. With this article we would like to give you an…
Teaming Up For Better Extensions
Previously, the TYPO3 group for QA Best Practices was a loose group financed via budgets every year. We recently asked the TYPO3 Association to become…
TYPO3 11.5.17 maintenance release published
The version 11.5.17 of the TYPO3 Enterprise Content Management System has just been released.
TYPO3 Education Committee: TCCE Certification Team Final Update
Since the Kick-Off-Phase, the TCCE Certification Team has been working on updating the skills for TYPO3 version 11. This is now officially complete.
TYPO3 v12.0—Release Your Power
TYPO3 version 12.0 is out! This is the first of five releases we plan to make over the next six months on the way to the long-term support release in…
Server Team Status Report
Like any internal IT department, inquiries come across our desk day in and day out. Most often, we’re helping end-users and community members when…
Get Ready for TYPO3 v12
The first sprint release of the TYPO3 v12 series is just around the corner. We plan to release TYPO3 version 12.0 in less than two weeks, on 4 October…
TYPO3 11.5.16 and 10.4.32 security releases published
The versions 11.5.16 and 10.4.32 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-010: Cross-Site Scripting in <f:asset.css> view helper
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
It has been discovered that TYPO3 CMS is vulnerable to broken access control.
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
It has been discovered that TYPO3 CMS is vulnerable to information disclosure.
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
It has been discovered that TYPO3 CMS is susceptible to denial of service.
Introducing a New Way to Meet TYPO3
There is a new event listing at typo3.org, where all of the titles start with “Meet TYPO3 at …”. These are external events where a person representing…
Documentation Team—Summer Update 2022
It’s been a busy summer in the northern hemisphere and we’ve got plenty of updates to share.
TYPO3 Developer Days 2022 Recap
The TYPO3 Developer Days is an international event for developers that takes place every year. For many developers in the community, It is the event…
TYPO3 Education Committee—TCCE Certification Team Update
Since the kick-off-phase, the TCCE Certification Team has been working on updating the skills for TYPO3 version 11. This is now officially complete.
Introducing the TYPO3 Content Blocks
We’re excited to announce that we’re working to introduce Content Blocks as a TYPO3 Core system extension, and we welcome developer help to achieve…
TYPO3 11.5.15 maintenance release published
The version 11.5.15 of the TYPO3 Enterprise Content Management System has just been released.
typo3.org Website Team Report Q2, 2022
The typo3.org team develops and maintains all the websites in the typo3.org universe. Working closely with other TYPO3 teams, we aim to satisfy every…
Happy 20th Birthday, TYPO3 Extension Repository
30 July 2022 marked the 20th anniversary of the first upload of a TYPO3 extension. We want to celebrate it and show some numbers.
TYPO3 11.5.14 maintenance release published
The version 11.5.14 of the TYPO3 Enterprise Content Management System has just been released.
TYPO3 11.5.13 and 10.4.31 maintenance releases published
The versions 11.5.13 and 10.4.31 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-EXT-SA-2022-014: SQL Injection in extension "LUX - TYPO3 Marketing Automation" (lux)
It has been discovered that the extension "LUX - TYPO3 Marketing Automation" (lux) is susceptible to SQL Injection.
TYPO3 Communication OKRs Initiative 2022/2023
Open Strategy Partners (OSP) is acting as Scrum master, and the project owner for the initiative is Mathias Bolt Lesniak.
In the early…
TYPO3 Education Committee—TCCE Certification Team Update
Meet & Greet at TYPO3 Education Committee Sprint in Düsseldorf
In Düsseldorf, we had six motivated team members, with contributors…
Growing Talent in the Job Market Desert
The call of businesses is strong and well-known—young tech talents are needed! But enticing a young audience to choose the path of IT…
Information From the Budget Q&A
This article contains information from that meeting as well as some additional facts and considerations.
Main Conclusions
- The …