TYPO3-EXT-SA-2019-005: SQL Injection in extension "Faceted Search" (ke_search)
It has been discovered that the extension "Faceted Search" (ke_search) is susceptible to SQL Injection.
Read moreTYPO3-PSA-2019-006: Security Misconfiguration since TYPO3 9.4.0
It has been discovered that TYPO3 is susceptible to security misconfiguration.
TYPO3-PSA-2019-005: Cross-Site Scripting in Bootstrap CSS toolkit before 3.4.1 and 4.3.0
It has been discovered that 3rd party library Bootstrap CSS toolkit bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution.
TYPO3-PSA-2019-004: Cross-Site Scripting in jQuery before 3.4.0
It has been discovered that 3rd party library jQuery bundled with TYPO3 is vulnerable to cross-site scripting through prototype pollution.
TYPO3-CORE-SA-2019-013: Cross-Site Scripting in Fluid Engine
It has been discovered, that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2019-012: Possible Arbitrary Code Execution in Image Processing
It has been discovered, that TYPO3 CMS is vulnerable to arbitrary code execution.
TYPO3-CORE-SA-2019-011: Security Misconfiguration in User Session Handling
It has been discovered, that TYPO3 CMS is susceptible to security misconfiguration.
TYPO3-CORE-SA-2019-010: Information Disclosure in User Authentication
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2019-009: Information Disclosure in Page Tree
It has been discovered, that TYPO3 CMS is susceptible to information disclosure.
PhpStorm—a Short Review
For some years JetBrains is offering free PhpStorm licenses for active TYPO3 Core developers. Its now time to give back and provide a short report about my experience with PhpStorm.