TYPO3 12.4.13 maintenance release published
The version 12.4.13 of the TYPO3 Enterprise Content Management System has just been released.
Read moreTYPO3 12.4.12 maintenance release published
The version 12.4.12 of the TYPO3 Enterprise Content Management System has just been released.
Initial Phase of the ACL Enhancement Initiative
Work has begun on the access control list (ACL) enhancement initiative, with analysis and research phases complete, we now have an initial set of insights to draw on. Next up is finalizing the scope with the TYPO3 Core Team and then starting the implementation. Read on for the full update.
Ticket Sale for TYPO3 Developer Days 2024 is now open!
Join one of the most anticipated events in the TYPO3 community. Please note that early bird tickets will be available until March 22, or until sold out. Don’t miss out on this amazing opportunity!
TYPO3 11.5.36 maintenance release published
The version 11.5.36 of the TYPO3 Enterprise Content Management System has just been released.
Report From The Content Types Team
The Content Types Team has had a productive couple of months. We showcased the Content Blocks extension at TYPO3camp RheinRuhr, and received valuable feedback from the community.
TYPO3-EXT-SA-2024-001: Broken Access Control in extension "Event management and registration" (sf_event_mgt)
It has been discovered that the extension "Event management and registration" (sf_event_mgt) is susceptible to Broken Access Control.
TYPO3-CORE-SA-2024-006: Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2024-005: Improper Access Control of Resources Referenced by t3:// URI Scheme
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2024-004: Information Disclosure of Encryption Key in TYPO3 Install Tool
It has been discovered that TYPO3 CMS is susceptible to information disclosure.