TYPO3-CORE-SA-2018-009: Security Misconfiguration in Install Tool Cookie
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
Read moreTYPO3-CORE-SA-2018-008: Cross-Site Scripting in Frontend User Login
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-007: Cross-Site Scripting in Backend Modal Component
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-006: Cross-Site Scripting in Online Media Asset Rendering
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2018-005: Cross-Site Scripting in CKEditor
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
This is the End - for TYPO3 v7 LTS
More than three years after the release of TYPO3 v7 LTS, this version has reached end-of-life, but we have some special treats in for you before we're shutting down this version. Additionally, TYPO3 v8 is now in priority bugfix mode, and TYPO3 v9 receives regular maintenance releases.
First Steps to Building a TYPO3 Extension (Like QueryBuilder)
How to build a TYPO3 extension like QueryBuilder, an easy-to-use and powerful filter for lists? Step one is to create the basic folder and file structure for TYPO3 extensions. In this tutorial, Henrik Elsner walks you through and shows how to set up the basics. Find out more!
TYPO3-PSA-2018-002: Web Resource Restrictions
It has been discovered that development related information can be retrieved by regular HTTP GET requests on NGINX web server environments missing strict access restriction settings.
TYPO3-EXT-SA-2018-010: Cross-Site Scripting in extension "libconnect" (libconnect)
It has been discovered that the extension "libconnect" (libconnect) is susceptible to Cross-Site Scripting.
Report from TYPO3-Sprint Berlin 25.-28.10.
In a Berlin backyard, near the former Wall, in the last corner of the former West, something as intangible as the TYPO3-Core suddenly became alive: In the form of about 15 people gathering for a sprint. Their common goal: to make a good project even better - take the TYPO3 core one small step further.