TYPO3-PSA-2019-005: Cross-Site Scripting in Bootstrap CSS toolkit before 3.4.1 and 4.3.0
It has been discovered that 3rd party library Bootstrap CSS toolkit bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution.
Read moreTYPO3-PSA-2019-004: Cross-Site Scripting in jQuery before 3.4.0
It has been discovered that 3rd party library jQuery bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution.
TYPO3-CORE-SA-2019-013: Cross-Site Scripting in Fluid Engine
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-012: Possible Arbitrary Code Execution in Image Processing
It has been discovered, that TYPO3 CMS is vulnerable to arbitrary code execution.
TYPO3-CORE-SA-2019-011: Security Misconfiguration in User Session Handling
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2019-010: Information Disclosure in User Authentication
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2019-009: Information Disclosure in Page Tree
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
PhpStorm—a Short Review
For some years JetBrains is offering free PhpStorm licenses for active TYPO3 Core developers. Its now time to give back and provide a short report about my experience with PhpStorm.
Find Records Without Administrative Database Access
Like socks in a washing machine, records in a TYPO3 installation can get lost sometimes. Fortunately, TYPO3 helps you with finding those records - even if you don’t have access to the underlying database. Learn how to properly look for records in this article.
How To: Route Enhancer For News
One of TYPO3’s core features are Human Readable URLs. Even though they are working fine for standard pages, some extbase extensions like ext:news require specific adjustments. In this article, Steffen Dietrich explains how to configure readable URLs for your news section.