Maintaining the “health” of your website is crucial and knowing that it is running securely is the most important question of all. Business websites need to be monitored, extended and updated on a regular basis. If you’re still running your website on an outdated TYPO3 version, gain peace of mind by opting for TYPO3 GmbH’s ELTS offer.
TYPO3-EXT-SA-2021-017: Multiple vulnerabilities in extension "pixx.io integration for TYPO3 (DAM)" (pixxio)
It has been discovered that the extension"pixx.io integration for TYPO3 (DAM)" (pixxio) is susceptible to Server-side request forgery, Remote Code Execution, Broken Access Control and vulnerable 3rd Party Components.
Read moreTYPO3-EXT-SA-2021-016: Denial of Service in extension "Code Highlight" (codehighlight)
It has been discovered that the extension "Code Highlight" (codehighlight) is susceptible to Denial of Service.
TYPO3-EXT-SA-2021-015: Cross-Site Scripting in extension "Google for Jobs" (google_for_jobs)
It has been discovered that the extension"Google for Jobs" (google_for_jobs) is susceptible to Cross-Site Scripting.
Don’t Use Unsupported Software
Operating supported software protects your infrastructure but more importantly, it is part of your responsibility to protect the data of your customers.
TYPO3-CORE-SA-2021-015: HTTP Host Header Injection in Request Handling
It has been discovered that TYPO3 CMS is vulnerable to HTTP header injection.
TYPO3-CORE-SA-2021-014: Cross-Site-Request-Forgery in Backend URI Handling
It has been discovered that TYPO3 CMS is vulnerable to cross-site-request-forgery.
ELTS is now available for TYPO3 version 9.5!
Extended Long Term Support for TYPO3 version 9.5 officially started today. ELTS offers up to three more years of security, compliance, and compatibility and will be available until October 2024.
Extended Long Term Support for TYPO3 9.5 - Pre-Order Now Available
Extended Long Term Support for TYPO3 version 9.5 is now available for pre order and will officially start on October 1, 2021.
Extended ELTS for TYPO3 7.6 - it’s happening!
Extended ELTS 7.6 has been released, as the ELTS 7.6 expires in November 2021. In case you’re not ready to upgrade, feel free to renew your ELTS for one more year.
TYPO3-EXT-SA-2021-014: SQL Injection in extension "Newsletter" (newsletter)
It has been discovered that the extension"Newsletter" (newsletter) is susceptible to SQL Injection.