TYPO3 9.5.8 and 8.7.27 security releases published
The TYPO3 Community announces the versions 9.5.8 LTS and 8.7.27 LTS of the TYPO3 Enterprise Content Management System.
Read moreTYPO3-CORE-SA-2019-020: Insecure Deserialization in TYPO3 CMS
It has been discovered that TYPO3 CMS is vulnerable to insecure deserialization.
TYPO3-CORE-SA-2019-019: Arbitrary Code Execution and Cross-Site Scripting in Backend API
It has been discovered, that TYPO3 CMS is vulnerable to arbitrary code execution and cross-site scripting.
TYPO3-CORE-SA-2019-018: Security Misconfiguration in Frontend Session Handling
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2019-017: Broken Access Control in Import Module
It has been discovered, that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2019-016: Possible deserialization side-effects in symfony/cache
It has been discovered that a third party dependency used by TYPO3 CMS is susceptible of being used during insecure deserialization.
TYPO3-CORE-SA-2019-015: Cross-Site Scripting in Link Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-014: Information Disclosure in Backend User Interface
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
docs.typo3.org Gets New Infrastructure
docs.typo3.org is now hosted by TYPO3 Inc. and gets a modern setup using Bamboo as CI (Continuous Integration) solution for rendering.
Recap: Docs Team Joins typo3.org Sprint Wiesbaden
The Documentation Team joined the typo3.org Team Sprint in Wiesbaden, Germany from Feb 10-13. Two of us from the Docs team met up for the sprint, Daniel Siepmann, of Codappix GmbH, and myself, Sybille Peters, from Carl von Ossietzky Universität Oldenburg.