Dear users of TYPO3,
It has been discovered that TYPO3 Core is vulnerable to Information
Disclosure and Cross-Site Scripting.
Especially the first issue is considered to be very critical by the
TYPO3 Security Team.
New packaged versions (4.0.x, 4.1.x, 4.2.x) along with patches for all
versions since 3.3 is now available.
Please read the below bulletin for the complete details and solutions:
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/
Regards,
Lars Houmark
TYPO3 Security Team