TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting..
Read moreTYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments
It has been discovered that the Fluid Engine is vulnerable to cross-site scripting.
TYPO3-EXT-SA-2020-020: Denial of Service in extension "Authenticator" (defbu_authenticator)
It has been discovered that the extension "Authenticator" (defbu_authenticator) is susceptible to Denial of Service.
TYPO3-EXT-SA-2020-019: Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)
It has been discovered that the extension "View frontend statistics" (view_statistics) is susceptible to Sensitive Data Exposure.
TYPO3-EXT-SA-2020-018: Multiple vulnerabilities in extension "phpMyAdmin" (phpmyadmin)
It has been discovered that the extension "phpmyadmin" (phpmyadmin) is susceptible to SQL Injection and Cross-Site Scripting.
Successful TYPO3 Accessibility Sprint
The first remote accessibility sprint took place from 21st to 23rd of October 2020 and it was successful indeed. During these three productive days we focused on knowledge sharing, addressing open issues, and creating a practical checklist for developers. An accessible TYPO3 improves the experience of every user of TYPO3
Community Ombudsperson—What Are Your Thoughts?
Just before the Developer Days 2019, a small group was formed to look into setting up a formal body to ensure the wellbeing of everyone in the community—so-called ombudspersons. Now, we’re asking for your input.
TYPO3 on AWS Elastic Beanstalk
Among the wide range of options for professional TYPO3 hosting in the cloud is AWS Elastic Beanstalk; an easy-to-use service for deploying and scaling web applications. Learn more about this solution and how to deploy TYPO3 instances in this article.
Bringing Rector to TYPO3 for Automated Upgrades
Keeping up with changes is challenging at the best of times. There are some good tools to help keep track of changes, but they still require tedious manual labor. What if you had a tool that would not only keep you but also your codebase up to date? That’s where Rector comes in! There are 69 fixed rules so far, and you can help us add more.
Server Team Status Report—November 2020
After one meeting in person early this year, all our subsequent sprints were forced into remote calls due to the ongoing pandemic. Nevertheless, we’ve used the sprint dates we had already agreed upon to tackle our duties from home.