[TYPO3-announce] URGENT: Critical vulnerability in TYPO3 CMS has been found and fixed
TYPO3 Security Team
security at typo3.org
Tue May 24 10:39:09 CEST 2016
Dear TYPO3 users!
It has been discovered that TYPO3 CMS has a missing access check, which makes it vulnerable to Remote Code Execution and Information Disclosure.
For details on the issue please read the accordant advisory:
TYPO3-CORE-SA-2016-013: Missing Access Check in TYPO3 CMS
The advisory contains detailed instructions how to patch installations and which versions have been released containing a fix.
In general the TYPO3 Security Team recommends to read the following pages:
The TYPO3 Security Guide:
Make sure you are subscribed to the TYPO3 Announce List:
See all TYPO3 security advisories:
Member of the TYPO3 Security Team
TYPO3 Security Team homepage: https://typo3.org/teams/security/
E-Mail: security at typo3.org
More information about the TYPO3-announce