Oliver started to work with TYPO3 in 2005 and was fascinated by the product and its universe. Since 2007 he is member of the TYPO3 Core Team. After going back to university in 2014 for achieving a postgraduate master degree in internet web science, he is now researching on advanced web technology topics in general and for TYPO3 in particular. In his spare time, Oliver loves to go cycling cross-country in the uplands around Hof (Germany) in northern Bavaria - at the region where he's living as well.
TYPO3 v9’s New Extension Scanner Makes Planning Upgrades Easier
The new Extension Scanner included in TYPO3 v9 helps you analyze websites and applications to better plan and estimate your upgrades. Are you working with an older TYPO3 version? The scanner's standalone version also works with TYPO3 v6, v7, and v8.
Read moreTYPO3-CORE-SA-2018-012: Denial of Service in Frontend Record Registration
It has been discovered, that TYPO3 CMS is vulnerable to denial of service.
TYPO3-CORE-SA-2018-011: Denial of Service in Online Media Asset Handling
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2018-010: Information Disclosure in Install Tool
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2018-009: Security Misconfiguration in Install Tool Cookie
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2018-008: Cross-Site Scripting in Frontend User Login
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-007: Cross-Site Scripting in Backend Modal Component
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-006: Cross-Site Scripting in Online Media Asset Rendering
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-005: Cross-Site Scripting in CKEditor
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-PSA-2018-002: Web Resource Restrictions
It has been discovered that development related information can be retrieved by regular HTTP GET requests on NGINX web server environments missing strict access restriction settings.