Server Team Status Report — September 2022
Like any internal IT department, inquiries come across our desk day in and day out. Most often, we’re helping end-users and community members when they encounter a problem with our infrastructure, for example, logging in to their TYPO3 account.
Read moreGet Ready for TYPO3 v12
The first sprint release of the TYPO3 v12 series is just around the corner. We plan to release TYPO3 version 12.0 in less than two weeks, on 4 October 2022. This article reveals some of the overall technical details and planned release dates of the v12 series.
TYPO3 11.5.16 and 10.4.32 security releases published
The versions 11.5.16 and 10.4.32 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2022-011: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-010: Cross-Site Scripting in view helper
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-009: Stored Cross-Site Scripting via FileDumpController
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-008: Missing check for expiration time of password reset token for backend users
It has been discovered that TYPO3 CMS is vulnerable to broken access control.
TYPO3-CORE-SA-2022-007: User Enumeration via Response Timing
It has been discovered that TYPO3 CMS is vulnerable to information disclosure.
TYPO3-CORE-SA-2022-006: Denial of Service in Page Error Handling
It has been discovered that TYPO3 CMS is susceptible to denial of service.
Introducing a New Way to Meet TYPO3
There is a new event listing at typo3.org, where all of the titles start with “Meet TYPO3 at …”. These are external events where a person representing TYPO3 will be present.