TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)
- Release Date: July 28, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- …
TYPO3-PSA-2020-001: Critical vulnerability in legacy versions of TYPO3 CMS
TYPO3-EXT-SA-2020-014 addresses the same vulnerability - the functionality has been extracted back then during TYPO3 v7 development to extension …
Structured Content Initiative—What Happened in May–June 2020?
The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our…
Report from the typo3.org Team 2020—Part 1
Team Sprints / Remote Days
Like all of the TYPO3 teams and nearly the whole of humanity, we also faced the problem named COVID-19. Just before the…
TYPO3-EXT-SA-2020-013: Multiple vulnerabilities in extension "mm_forum" (mm_forum)
- Release Date: July 07, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component:…
TYPO3-EXT-SA-2020-012: Cross-Site Scripting in extension "Google reCAPTCHA (v2/v3)" (jh_captcha)
- Release Date: July 07, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component:…
TYPO3-EXT-SA-2020-011: Remote Code Execution in extension "Turn!" (turn)
- Release Date: July 07, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component:…
TYPO3-EXT-SA-2020-010: Broken Access Control in extension "typo3_forum" (typo3_forum)
- Release Date: July 07, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component:…
TYPO3 10.4.5 maintenance release published
The following TYPO3 update has been released:
- TYPO3 10.4.5 LTS
This version is a maintenance release only.
Further upgrade instructions
No database…
TYPO3-EXT-SA-2020-009: Cross-Site Scripting in extension "Faceted Search" (ke_search)
- Release Date: July 07, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component:…
This Month in TYPO3 - May 2020 - Issue #17
Time flies! The release of TYPO3 v10 is already one month ago and the adoption rate is awesome which can be measured by over 400 compatible…
This Month in TYPO3 - April 2020 - Issue #16
April was marked by the long awaited release of TYPO3 v10 LTS. The feedback of the community so far is overwhelming and we have a rock stable new LTS…
A Special Call-Out for TYPO3 Market Research
Why Are We Doing This?
Marketing Team Lead Luisa laid out the 2020 Vision: to raise awareness, interest, and consideration for decision makers. In the…
TYPO3 v10 Community Content Roundup
You can also submit your links to the next edition of This Month in TYPO3.
Submit Your Link to This Month in TYPO3
And the Winner Is…
In the run up to…
Who Does What in the Association Board, 2020?
Check out the roles and responsibilities for the members of the TYPO3 Association Board in 2020.
Mentoring Digital Transformation with TYPO3
“That’s where my career started. People answered my silly questions on the web forums. They were helpful and friendly, and after some years I realized…
Recap from the First Online Marketing Sprint (Q2/2020)
The participants engaged in lively discussion and strategic planning for two days, in large group hangouts lasting three hours and subsequent breakout…
TYPO3 10.4.4 and 9.5.19 maintenance releases published
The following TYPO3 updates have been released:
- TYPO3 10.4.4 LTS
- TYPO3 9.5.19 LTS
Both versions are maintenance releases only.
Further upgrade…
TYPO3 Book Report—Who’s Writing the TYPO3 Book?
Sign Up to the TYPO3 Guidebook Mailing List
How did you get into technical writing, Felicity?
In my former life I was a business analyst, and I always…
TYPO3 Users, Please Let Us Know Your Feedback!
The TYPO3 Project has started to use G2.com, the tech marketplace, as a prominent place to show the TYPO3 Project to millions of business…
Structured Content Initiative—What happened in April? The survey results!
The Structured Content Initiative is the core Strategic Initiative focused on improving the content editing user experience in TYPO3 CMS. Read our…
TYPO3 10.4.3 and 9.5.18 maintenance releases published
The following TYPO3 updates have been released:
- TYPO3 10.4.3 LTS
- TYPO3 9.5.18 LTS
Both versions are maintenance releases only. They aim to reduce…
Report from the Board QSA—April 2020
Although the Board meets online every two weeks throughout the year, it is necessary with longer physical meetings for in-depth and strategic…
TYPO3-CORE-SA-2020-006: Same-Origin Request Forgery to Backend User Interface
- Component Type: TYPO3 CMS
- Subcomponent: Backend User Interface & Install Tool (ext:backend, ext:backend)
- Release Date: May 12, 2020
- Vulnerability…
TYPO3-CORE-SA-2020-005: Insecure Deserialization in Backend User Settings
- Component Type: TYPO3 CMS
- Subcomponent: Backend User Interface (ext:backend)
- Release Date: May 12, 2020
- Vulnerability Type: Insecure…
TYPO3-EXT-SA-2020-008: Cross-Site Scripting in "SVG Sanitizer" (svg_sanitizer)
- Release Date: May 12, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component: SVG…
TYPO3-CORE-SA-2020-004: Class destructors causing side-effects when being unserialized
- Component Type: TYPO3 CMS
- Subcomponent: Core (ext:core)
- Release Date: May 12, 2020
- Vulnerability Type: Insecure Deserialization
- Affected…
TYPO3-CORE-SA-2020-003: Cross-Site Scripting in Link Handling
- Component Type: TYPO3 CMS
- Subcomponent: Link Handling (ext:frontend)
- Release Date: May 12, 2020
- Vulnerability Type: Information Disclosure
- …
TYPO3-EXT-SA-2020-007: Sensitive Data Exposure in extension "Job Fair" (jobfair)
- Release Date: May 12, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default installation.
- Component: Job…
TYPO3-CORE-SA-2020-002: Cross-Site Scripting in Form Engine
- Component Type: TYPO3 CMS
- Subcomponent: Form Engine (ext:backend)
- Release Date: May 12, 2020
- Vulnerability Type: Cross-Site Scripting
- Affected…