TYPO3 News & Events Hub
What’s New & What’s Coming
Stay up to date with the latest TYPO3 news and announcements by subscribing to our RSS feed.
TYPO3-EXT-SA-2022-017: Multiple vulnerabilities in extension "Newsletter subscriber management" (fp_newsletter)
It has been discovered that the extension "Newsletter subscriber management" (fp_newsletter) is susceptible to Information Disclosure and Broken Access Control.
Read moreTYPO3-EXT-SA-2022-016: Insufficient Session Expiration after Password Change in extension "Change password for frontend users" (fe_change_pwd)
It has been discovered that the extension "Change password for frontend users" (fe_change_pwd) is susceptible to insufficient session expiration.
TYPO3 12.1.1, 11.5.20 and 10.4.33 security releases published
The versions 12.1.1, 11.5.20 and 10.4.33 of the TYPO3 Enterprise Content Management System have just been released.
TYPO3-CORE-SA-2022-017: By-passing Cross-Site Scripting Protection in HTML Sanitizer
It has been discovered that TYPO3 CMS is vulnerable to cross-site scripting.
TYPO3-CORE-SA-2022-016: Sensitive Information Disclosure via YAML Placeholder Expressions in Site Configuration
It has been discovered that TYPO3 CMS is susceptible to sensitive information disclosure.
TYPO3-CORE-SA-2022-015: Arbitrary Code Execution via Form Framework
It has been discovered that TYPO3 CMS is vulnerable to arbitrary code execution.
TYPO3-CORE-SA-2022-014: Insufficient Session Expiration after Password Reset
It has been discovered that TYPO3 CMS is susceptible to insufficient session expiration.
TYPO3-CORE-SA-2022-013: Weak Authentication in Frontend Login
It has been discovered that TYPO3 CMS is susceptible to weak authentication.
TYPO3-CORE-SA-2022-012: Denial of Service in Page Error Handling
It has been discovered that TYPO3 CMS is susceptible to denial of service.
TYPO3 v12.1 — Together As One
We are happy to announce the release of TYPO3 version 12.1, which comes with “Reactions”. This new feature enables TYPO3 to react to incoming webhooks. We also reworked the visual look and feel of the backend search and added a “tiles view” to the Filelist module that impacts how files and folders are displayed. Read on to learn more about the second sprint release of the TYPO3 v12 release series.