TYPO3-CORE-SA-2019-019: Arbitrary Code Execution and Cross-Site Scripting in Backend API
It has been discovered, that TYPO3 CMS is vulnerable to arbitrary code execution and cross-site scripting.
Read moreTYPO3-CORE-SA-2019-018: Security Misconfiguration in Frontend Session Handling
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2019-017: Broken Access Control in Import Module
It has been discovered, that TYPO3 CMS is susceptible to broken access control.
TYPO3-CORE-SA-2019-016: Possible deserialization side-effects in symfony/cache
It has been discovered that a third party dependency used by TYPO3 CMS is susceptible of being used during insecure deserialization.
TYPO3-CORE-SA-2019-015: Cross-Site Scripting in Link Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-014: Information Disclosure in Backend User Interface
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
docs.typo3.org Gets New Infrastructure
docs.typo3.org is now hosted by TYPO3 Inc. and gets a modern setup using Bamboo as CI (Continuous Integration) solution for rendering.
TYPO3 v9.5.7 LTS and v8.7.26 LTS released
The TYPO3 Community announces the versions 9.5.7 LTS and 8.7.26 LTS of the TYPO3 Enterprise Content Management System.
T3DD 2019—Sponsor One of the Biggest TYPO3 Events of the Year
If you would like to support TYPO3 Developer Days 2019, we would be happy to hear from you!
TYPO3-PSA-2019-008: By-passing protection of Phar Stream Wrapper Interceptor
It has been discovered that the protection against insecure deserialization can be by-passed in Phar Stream Wrapper component.