TYPO3-EXT-SA-2022-002: Cross-Site Scripting in extension "Bookdatabase" (extbookdatabase)
It has been discovered that the extension "Bookdatabase" (extbookdatabase) is susceptible to Cross-Site Scripting.
Read moreTYPO3-EXT-SA-2022-001: Server-side request forgery in extension "Kitodo.Presentation" (dlf)
It has been discovered that the extension "Kitodo.Presentation" (dlf) is susceptible to Server-side request forgery.
TYPO3 11.5.6 and 10.4.24 maintenance releases published
The versions 11.5.6 and 10.4.24 of the TYPO3 Enterprise Content Management System have just been released.
New System Requirements for Upcoming TYPO3 v12
TYPO3 v12 LTS will be released in April 2023. With every major TYPO3 version, we increase the minimum requirements to evolve with the ecosystem running TYPO3.
TYPO3 11.5.5 and 10.4.23 maintenance releases published
The versions 11.5.5 and 10.4.23 of the TYPO3 Enterprise Content Management System have just been released.
Extension Award 2021—Announcing the Winners
The TYPO3 Extension Award for Best Documentation 2021 has the following winners:
TYPO3-PSA-2021-004: Statement on Recent log4j/log4shell Vulnerabilities (CVE-2021-44228)
Components of TYPO3 CMS are based on PHP and are therefore not directly affected by the recent log4j vulnerabilities. However, additional services used in web application scenarios may be affected.
TYPO3-PSA-2021-003: Mitigation of Cache Poisoning Caused by Untrusted URL Query Parameters
It has been discovered that TYPO3 CMS is susceptible to cache poisoning.
TYPO3 11.5.4 and 10.4.22 maintenance releases published
The versions 11.5.4 and 10.4.22 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 Core Development to Change Branch Name
TYPO3 monorepo branch name changes from master to main.