TYPO3 version 4.3.1 released
Just now the Typo3 - Core Team for the stable version of TYPO3 version 4.3.1 released. Originally, the developers had planned the latest version of the popular Enterprise Content Management Systems on Tuesday made public, but deviated from the planned date in favor of some other improvements. The latest version of TYPO3 is both a bug fix release and security release. An update to the latest version is strongly recommended, but not for all users of Typo3 immediately and hastily mandatory. Mainly affected by a serious vulnerability is a system extension that does not always apply.
With version 4.3.0 we have introduced the CMS Typo3 several system extensions. Among these is the system whereby authentication openid extension for the back end with a general OpenID should be possible. This system extension, it had to be activated separately to be used at all. Who has actually done it, and uses this extension, should definitely upgrade to the latest version of Typo3. The vulnerability allows namely, that users can use an OpenID, unauthorized manner, and gain any access rights to the backend.
With version 4.3.0 we have introduced the CMS Typo3 several system extensions. Among these is the system whereby authentication openid extension for the back end with a general OpenID should be possible. This system extension, it had to be activated separately to be used at all. Who has actually done it, and uses this extension, should definitely upgrade to the latest version of Typo3. The vulnerability allows namely, that users can use an OpenID, unauthorized manner, and gain any access rights to the backend.
Read More @ TYPO3 Customization BlogLooking for TYPO3 Customization Services!!!!!!
