TYPO3 v6.2.55, 7.6.49, and 8.7.38 ELTS Released
Still sticking to an older version of TYPO3? Today, TYPO3 v6.2.55 ELTS, 7.6.49, and 8.7.38 have been released. Staying on top of maintenance updates should be a top priority - Gain peace of mind by opting for one of TYPO3 GmbH’s Extended Support offers!
Read moreTYPO3 10.4.10 and 9.5.23 security releases published
The versions 10.4.10 and 9.5.23 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-PSA-2020-003: Mitigation of Cross-Site Scripting Vulnerabilities in File Upload Handling
Repeating and refining public service announcement TYPO3-PSA-2019-010.
TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode
Accessing Install Tool via TYPO3 Backend requires password verification - known as Sudo Mode.
TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget
It has been discovered that TYPO3 CMS is susceptible to XML external entity processing.
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
It has been discovered that TYPO3 CMS is susceptible to sensitive data exposure.
TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting..
TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments
It has been discovered that the Fluid Engine is vulnerable to cross-site scripting.
Successful TYPO3 Accessibility Sprint
The first remote accessibility sprint took place from 21st to 23rd of October 2020 and it was successful indeed. During these three productive days we focused on knowledge sharing, addressing open issues, and creating a practical checklist for developers. An accessible TYPO3 improves the experience of every user of TYPO3
TYPO3 Deprecation Policy
TYPO3 has a reputation for being an exceptionally stable, robust, and reliable enterprise content management system. We achieve this by following a strict deprecation policy and backwards-compatibility promise. This article provides an insight into this topic for integrators and developers. I also explain when and why a TYPO3 upgrade is a no-brainer.