TYPO3-CORE-SA-2025-021: Broken Access Control in Backend AJAX Routes
It has been discovered that TYPO3 CMS is susceptible to broken access control.
Read moreTYPO3-CORE-SA-2025-020: Information Disclosure via File Abstraction Layer
It has been discovered that TYPO3 CMS is susceptible to information disclosure.
TYPO3-CORE-SA-2025-019: Insufficient Entropy in Password Generation
It has been discovered that TYPO3 CMS is susceptible to insufficient entropy.
TYPO3-CORE-SA-2025-018: Denial of Service in TYPO3 Bookmark Toolbar
It has been discovered that TYPO3 CMS is susceptible to denial of service.
TYPO3-CORE-SA-2025-017: Open Redirect in TYPO3 CMS
It has been discovered that TYPO3 CMS is susceptible to open redirect.
TYPO3 13.4.18 and 12.4.37 security releases published
The versions 13.4.18 and 12.4.37 of the TYPO3 Enterprise Content Management System have just been released.
Bringing Czech to TYPO3: My Translation Journey
Inspired at TYPO3 Camp Vienna and armed with Crowdin, glossary work, and community support, Martin Pribyl translated and approved over 67,000 words. Bringing Czech back to TYPO3 is a story of dedication, routine, and the power of open source collaboration.
TYPO3-PSA-2025-001: Sanitization bypass in SVG Sanitizer
Third-party package enshrined/svg-sanitize, used by TYPO3 core packages, was susceptible to bypassing the sanitization strategy.
TYPO3 13.4.17 and 12.4.36 maintenance releases published
The versions 13.4.17 and 12.4.36 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3 13.4.16 and 12.4.35 maintenance releases published
The versions 13.4.16 and 12.4.35 of the TYPO3 Enterprise Content Management System have just been released.