Skip to main navigation Skip to main content Skip to page footer

TYPO3-SA-2009-002: Information Disclosure & XSS in TYPO3 Core

10 February 2009 ยท Lars Houmark
Dear users of TYPO3,

It has been discovered that TYPO3 Core is vulnerable to Information  
Disclosure and Cross-Site Scripting.

Especially the first issue is considered to be very critical by the  
TYPO3 Security Team.

New packaged versions (4.0.x, 4.1.x, 4.2.x) along with patches for all  
versions since 3.3 is now available.

Please read the below bulletin for the complete details and solutions:

http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/

Regards,

Lars Houmark
TYPO3 Security Team