TYPO3 CMS Core Security Advisory TYPO3-CORE-SA-2013-001
Dear users of TYPO3! It has been discovered that the TYPO3 Core is susceptible to SQL Injection and Open Redirection For more details on the issues please read the accordant advisory: TYPO3 Security Bulletin TYPO3-CORE-SA-2013-001: SQL Injection and Open Redirection in TYPO3 Core http://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-001/ ========================================================================================================= IMPORTANT: Please read the advisory carefully, as ADDITIONAL STEPS might be required after the TYPO3 Update in certain cases. ========================================================================================================= In general the TYPO3 Security Team recommends to read the following pages: The TYPO3 Security Guide: http://typo3.org/documentation/document-library/extension-manuals/doc_guide_security/current/ Make sure you are subscribed to the TYPO3 Announce List: http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce See all TYPO3 security advisories: http://typo3.org/teams/security/security-bulletins/ Regards, Helmut Hummel Member of the TYPO3 Security Team -- TYPO3 Security Team homepage: http://typo3.org/teams/security/ E-Mail: security@typo3.org