Posts by tag: Security en https://news.typo3.com/article/tag/security/blog.tag.xml Mon, 07 Sep 2026 12:21:34 +0200 https://news.typo3.com/article/typo3-1436-and-13434-security-releases-publishedhttps://news.typo3.com/article/typo3-1436-and-13434-security-releases-published#commentsTue, 11 Aug 2026 09:35:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-1436-and-13434-security-releases-publishedThe versions 14.3.6 and 13.4.34 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/typo3-1435-and-13433-security-releases-publishedhttps://news.typo3.com/article/typo3-1435-and-13433-security-releases-published#commentsTue, 14 Jul 2026 14:00:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-1435-and-13433-security-releases-publishedThe versions 14.3.5 and 13.4.33 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/typo3-1433-and-13431-security-releases-publishedhttps://news.typo3.com/article/typo3-1433-and-13431-security-releases-published#commentsTue, 09 Jun 2026 14:00:00 +0200Oliver Haderhttps://news.typo3.com/article/typo3-1433-and-13431-security-releases-publishedThe versions 14.3.3 and 13.4.31 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/changes-to-the-typo3-bug-bounty-programhttps://news.typo3.com/article/changes-to-the-typo3-bug-bounty-program#commentsTue, 19 May 2026 09:38:00 +0200Oliver Haderhttps://news.typo3.com/article/changes-to-the-typo3-bug-bounty-programExtension security reporting continues — financial rewards for extension findings will end on 31 May 2026. https://news.typo3.com/article/typo3-1402-13423-and-12441-security-releases-publishedhttps://news.typo3.com/article/typo3-1402-13423-and-12441-security-releases-published#commentsTue, 13 Jan 2026 13:00:00 +0100Oliver Haderhttps://news.typo3.com/article/typo3-1402-13423-and-12441-security-releases-publishedThe versions 14.0.2, 13.4.23 and 12.4.41 of the TYPO3 Enterprise Content Management System have just been released. https://news.typo3.com/article/new-elts-pricing-v124https://news.typo3.com/article/new-elts-pricing-v124#commentsThu, 02 Oct 2025 09:09:00 +0200Daniel Fauhttps://news.typo3.com/article/new-elts-pricing-v124New ELTS pricing for TYPO3 v12 starting April 2026, with membership discounts unchanged and early notice to support planning. No changes for v11 and v10. https://news.typo3.com/article/enhancing-e-commerce-security-comprehensive-guidehttps://news.typo3.com/article/enhancing-e-commerce-security-comprehensive-guide#commentsSun, 29 Sep 2024 09:31:00 +0200Panagiotis Semitekoloshttps://news.typo3.com/article/enhancing-e-commerce-security-comprehensive-guideHow can the right CMS deliver e-commerce security? We review proven methods to keep e-commerce businesses safe, and what TYPO3 can do to support that goal. https://news.typo3.com/article/how-to-change-the-entry-point-in-typo3-v13https://news.typo3.com/article/how-to-change-the-entry-point-in-typo3-v13#commentsThu, 19 Sep 2024 09:00:00 +0200Tom Warwickhttps://news.typo3.com/article/how-to-change-the-entry-point-in-typo3-v13Find out how to change the backend entry point from /typo3 to anything you want, including subdomains with TYPO3 version 13. https://news.typo3.com/security/advisory/typo3-ext-sa-2024-001https://news.typo3.com/security/advisory/typo3-ext-sa-2024-001#commentsTue, 13 Feb 2024 12:10:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2024-001It has been discovered that the extension "Event management and registration" (sf_event_mgt) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-011https://news.typo3.com/security/advisory/typo3-ext-sa-2023-011#commentsWed, 13 Dec 2023 11:42:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-011It has been discovered that the extension "Direct Mail" (direct_mail) is susceptible to Configuration Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-010https://news.typo3.com/security/advisory/typo3-ext-sa-2023-010#commentsWed, 13 Dec 2023 11:41:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-010It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-009https://news.typo3.com/security/advisory/typo3-ext-sa-2023-009#commentsWed, 13 Dec 2023 11:40:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-009It has been discovered that the extension "Content Consent" (content_consent) is susceptible to Insecure Direct Object Reference. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-008https://news.typo3.com/security/advisory/typo3-ext-sa-2023-008#commentsWed, 04 Oct 2023 11:40:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-008It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-007https://news.typo3.com/security/advisory/typo3-ext-sa-2023-007#commentsThu, 17 Aug 2023 12:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-007It has been discovered that the extension "hCaptcha for EXT:form" (hcaptcha) is susceptible to Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-006https://news.typo3.com/security/advisory/typo3-ext-sa-2023-006#commentsTue, 13 Jun 2023 10:02:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-006It has been discovered that the extension "Canto Extension" (canto_extension) is susceptible to Server Side Request Forgery and Remote Code Execution. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-005https://news.typo3.com/security/advisory/typo3-ext-sa-2023-005#commentsTue, 13 Jun 2023 10:01:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-005It has been discovered that the extension "ipandlanguageredirect" (ipandlanguageredirect) is susceptible to SQL Injection. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-004https://news.typo3.com/security/advisory/typo3-ext-sa-2023-004#commentsTue, 13 Jun 2023 10:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-004It has been discovered that the extension "Faceted Search" (ke_search) is susceptible to Cross-Site Scripting. https://news.typo3.com/article/typo3-elts-87-year-four-is-now-livehttps://news.typo3.com/article/typo3-elts-87-year-four-is-now-live#commentsMon, 03 Apr 2023 08:00:00 +0200Jörg Emshttps://news.typo3.com/article/typo3-elts-87-year-four-is-now-liveBenefit from one more year of extended support for TYPO3 8.7. Increase your ROI and stay legally compliant. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-003https://news.typo3.com/security/advisory/typo3-ext-sa-2023-003#commentsWed, 22 Mar 2023 12:40:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-003It has been discovered that the extension "Fluid Components" (fluid_components) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-002https://news.typo3.com/security/advisory/typo3-ext-sa-2023-002#commentsTue, 21 Feb 2023 11:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-002It has been discovered that the extension "Forms Export" (frp_form_answers) is susceptible to Cross-Site Scripting. https://news.typo3.com/security/advisory/typo3-ext-sa-2023-001https://news.typo3.com/security/advisory/typo3-ext-sa-2023-001#commentsTue, 31 Jan 2023 11:00:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2023-001It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control. https://news.typo3.com/article/extended-elts-for-typo3-87-pre-orders-available-nowhttps://news.typo3.com/article/extended-elts-for-typo3-87-pre-orders-available-now#commentsSun, 01 Jan 2023 04:00:00 +0100Jörg Emshttps://news.typo3.com/article/extended-elts-for-typo3-87-pre-orders-available-nowBenefit from one more year of extended support for TYPO3 8.7. Increase your ROI and stay legally compliant. https://news.typo3.com/security/advisory/typo3-ext-sa-2022-018https://news.typo3.com/security/advisory/typo3-ext-sa-2022-018#commentsTue, 13 Dec 2022 12:32:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2022-018It has been discovered that the extension "Master-Quiz" (fp_masterquiz) is susceptible to Information Disclosure and Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2022-017https://news.typo3.com/security/advisory/typo3-ext-sa-2022-017#commentsTue, 13 Dec 2022 12:31:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2022-017It has been discovered that the extension "Newsletter subscriber management" (fp_newsletter) is susceptible to Information Disclosure and Broken Access Control. https://news.typo3.com/security/advisory/typo3-ext-sa-2022-016https://news.typo3.com/security/advisory/typo3-ext-sa-2022-016#commentsTue, 13 Dec 2022 12:30:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2022-016It has been discovered that the extension "Change password for frontend users" (fe_change_pwd) is susceptible to insufficient session expiration. https://news.typo3.com/security/advisory/typo3-ext-sa-2022-015https://news.typo3.com/security/advisory/typo3-ext-sa-2022-015#commentsWed, 02 Nov 2022 12:30:00 +0100Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2022-015It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control. https://news.typo3.com/article/the-second-year-of-elts-95-starts-todayhttps://news.typo3.com/article/the-second-year-of-elts-95-starts-today#commentsSat, 01 Oct 2022 12:00:00 +0200Jörg Emshttps://news.typo3.com/article/the-second-year-of-elts-95-starts-todayELTS keeps you up-to-date and legally compliant. While there is no one-size-fits-all for maintaining your website and keeping it safe, when a release moves into the ELTS phase, TYPO3 guarantees maintenance for an additional three-year period. https://news.typo3.com/article/typo3-elts-95-will-soon-enter-its-second-yearhttps://news.typo3.com/article/typo3-elts-95-will-soon-enter-its-second-year#commentsTue, 06 Sep 2022 12:00:00 +0200Jörg Emshttps://news.typo3.com/article/typo3-elts-95-will-soon-enter-its-second-yearIf you need to maintain your TYPO3 9.5 installation(s) beyond September 30, 2022, you can benefit from ELTS 9.5 for up to two more years. The second year of ELTS 9.5 will start on October 1, 2022. https://news.typo3.com/article/extended-elts-for-typo3-87-its-happeninghttps://news.typo3.com/article/extended-elts-for-typo3-87-its-happening#commentsThu, 01 Sep 2022 10:31:06 +0200Jörg Emshttps://news.typo3.com/article/extended-elts-for-typo3-87-its-happeningAt the request of our ELTS customers, we evaluated a continuation of ELTS 8.7 during August and have now decided to extend ELTS 8.7 one more year. Security and compatibility updates will be available for another year–until March 31, 2024! https://news.typo3.com/security/advisory/typo3-ext-sa-2022-014https://news.typo3.com/security/advisory/typo3-ext-sa-2022-014#commentsTue, 12 Jul 2022 10:00:00 +0200Torben Hansenhttps://news.typo3.com/security/advisory/typo3-ext-sa-2022-014It has been discovered that the extension "LUX - TYPO3 Marketing Automation" (lux) is susceptible to SQL Injection.