An Open Discussion on the TYPO3 Association Budget Ideas for 2021
Here is a quick overview of the 2021 budget pools: The budget for 2021 is €1,150,000. Please be aware this amount is a forecast and may change in…
TYPO3 10.4.10 and 9.5.23 security releases published
The following TYPO3 updates have been released:
- TYPO3 10.4.10 LTS
- TYPO3 9.5.23 LTS
- TYPO3 8.7.38 ELTS
- TYPO3 7.6.48 ELTS
- TYPO3 6.2.54 ELTS
Both…
TYPO3-PSA-2020-003: Mitigation of Cross-Site Scripting Vulnerabilities in File Upload Handling
- Component Type: TYPO3 CMS
- Subcomponent: File Upload Handling (ext:filelist)
- Release Date: November 17, 2020
- Affected Versions: all …
TYPO3-PSA-2020-002: Protecting Install Tool with Sudo Mode
- Component Type: TYPO3 CMS
- Subcomponent: Install Tool (ext:install)
- Release Date: November 17, 2020
- Affected Versions:…
TYPO3-CORE-SA-2020-012: XML External Entity in Dashboard Widget
- Component Type: TYPO3 CMS
- Subcomponent: Dashboard (ext:dashboard)
- Release Date: November 17, 2020
- Vulnerability Type: XML External…
TYPO3-CORE-SA-2020-011: Cleartext storage of session identifier
- Component Type: TYPO3 CMS
- Subcomponent: Session Storage (ext:core)
- Release Date: November 17, 2020
- Vulnerability Type: Sensitive…
TYPO3-CORE-SA-2020-010: Cross-Site Scripting in Fluid view helpers
- Component Type: TYPO3 CMS
- Subcomponent: Fluid (ext:fluid)
- Release Date: November 17, 2020
- Vulnerability Type: Cross-Site Scripting …
TYPO3-CORE-SA-2020-009: Cross-Site Scripting through Fluid view helper arguments
- Component Type: TYPO3 CMS
- Subcomponent: Fluid Engine (package typo3fluid/fluid)
- Release Date: November 17, 2020
- Vulnerability…
TYPO3-EXT-SA-2020-020: Denial of Service in extension "Authenticator" (defbu_authenticator)
- Release Date: November 17, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default…
TYPO3-EXT-SA-2020-019: Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)
- Release Date: November 17, 2020
- Component Type: Third party extension. This extension is not a part of the TYPO3 default…