Tag: Security
Maintaining the “health” of your website is crucial and knowing that it is running securely is the most important question of all. Business websites need to be monitored, extended and updated on a regular basis. If you’re still running your website on an outdated TYPO3 version, gain peace of mind by opting for TYPO3 GmbH’s ELTS offer.
Extended ELTS for TYPO3 8.7—Pre-Orders Available Now
Benefit from one more year of extended support for TYPO3 8.7. Increase your ROI and stay legally compliant.
Read moreTYPO3-EXT-SA-2022-018: Multiple vulnerabilities in extension "Master-Quiz" (fp_masterquiz)
It has been discovered that the extension "Master-Quiz" (fp_masterquiz) is susceptible to Information Disclosure and Broken Access Control.
TYPO3-EXT-SA-2022-017: Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
It has been discovered that the extension "Newsletter subscriber management" (fp_newsletter) is susceptible to Information Disclosure and Broken Access Control.
TYPO3-EXT-SA-2022-016: Insufficient Session Expiration after Password Change in extension "Change password for frontend users" (fe_change_pwd)
It has been discovered that the extension "Change password for frontend users" (fe_change_pwd) is susceptible to insufficient session expiration.
TYPO3-EXT-SA-2022-015: Broken Access Control in extension "femanager" (femanager)
It has been discovered that the extension "femanager" (femanager) is susceptible to Broken Access Control.
The Second Year Of ELTS 9.5 Starts Today
ELTS keeps you up-to-date and legally compliant. While there is no one-size-fits-all for maintaining your website and keeping it safe, when a release moves into the ELTS phase, TYPO3 guarantees maintenance for an additional three-year period.
TYPO3 ELTS 9.5 Will Soon Enter Its Second Year
If you need to maintain your TYPO3 9.5 installation(s) beyond September 30, 2022, you can benefit from ELTS 9.5 for up to two more years. The second year of ELTS 9.5 will start on October 1, 2022.
Extended ELTS for TYPO3 8.7—it’s happening
At the request of our ELTS customers, we evaluated a continuation of ELTS 8.7 during August and have now decided to extend ELTS 8.7 one more year. Security and compatibility updates will be available for another year–until March 31, 2024!
TYPO3-EXT-SA-2022-014: SQL Injection in extension "LUX - TYPO3 Marketing Automation" (lux)
It has been discovered that the extension "LUX - TYPO3 Marketing Automation" (lux) is susceptible to SQL Injection.
TYPO3-EXT-SA-2022-013: Cross-Site Scripting in extension "AMEOS - TarteAuCitron (GDPR cookie banner and tracking management / French RGPD compatible)" (ameos_tarteaucitron)
It has been discovered that the extension "AMEOS - TarteAuCitron (GDPR cookie banner and tracking management / French RGPD compatible)" (ameos_tarteaucitron) is susceptible to Cross-Site Scripting.