Author: Oliver Hader
Oliver started to work with TYPO3 in 2005 and was fascinated by the product and its universe. Since 2007 he is member of the TYPO3 Core Team. After going back to university in 2014 for achieving a postgraduate master degree in internet web science, he is now researching on advanced web technology topics in general and for TYPO3 in particular. In his spare time, Oliver loves to go cycling cross-country in the uplands around Hof (Germany) in northern Bavaria - at the region where he's living as well.
TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget
It has been discovered that TYPO3 CMS is susceptible to XML external entity processing.
Read moreTYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.
TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting..
TYPO3 10.4.6 and 9.5.20 security releases published
The versions 10.4.6 and 9.5.20 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2020-008: Sensitive Information Disclosure
It has been discovered that TYPO3 CMS is susceptible to sensitive information disclosure.
TYPO3-CORE-SA-2020-007: Potential Privilege Escalation
It has been discovered that TYPO3 CMS is susceptible to privilege escalation.
TYPO3-EXT-SA-2020-014: Sensitive Information Disclosure in extension "Media Content Element" (mediace)
It has been discovered that the extension "Media Content Element" (mediace) is susceptible to Sensitive Information Disclosure.
TYPO3 10.4.5 maintenance release published
The version 10.4.5 of the TYPO3 Enterprise Content Management System has just been released.
TYPO3 10.4.3 and 9.5.18 maintenance releases published
The versions 10.4.3 and 9.5.18 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2020-006: Same-Origin Request Forgery to Backend User Interface
It has been discovered that TYPO3 CMS is vulnerable to same-origin request forgery.