Skip to content

Upgrading typo3/cms-core 12 to 13

Unknownv12.4.45 → v13.4.37Security16

Fetching 46 releases from GitHub…24 / 46
UnknownUpgrade verdict

DepDelta is still reading the notes for 22 of 46 releases, so breaking changes can't be ruled out yet.

  • DepDelta is still reading the release notes in this range, so it can't rule out breaking changes yet.
  • This page updates as the notes come in.
Top 3 of 16 that need code or config changes

PHP requirement changed in v13.0.0: ^8.1 → ^8.2.

Adds guzzlehttp/promises ^2.0.3 || ^3.0, symfony/polyfill-php84 ^1.38, symfony/polyfill-php85 ^1.38, symfony/process ^7.4.

Moves bacon/bacon-qr-code ^2.0.7 || ^3.0.1 → ^3.0, christian-riesen/base32 ^1.6 → ^2.0, doctrine/annotations ^1.13.3 || ^2.0 → ^2.0.2, doctrine/dbal ^3.9 → ~4.4.4, doctrine/event-manager ^2.0 → ^2.0.1, doctrine/lexer ^2.0 || ^3.0 → ^3.0.1, enshrined/svg-sanitize ~0.22 → ^1.1.1, guzzlehttp/guzzle ^7.7.0 → ^7.15.2 || ^8.0, guzzlehttp/psr7 ^2.5.0 → ^2.10.2 || ^3.0, lolli42/finediff ^1.0.2 → ^1.1.1, psr/http-client ^1.0 → ^1.0.3, psr/http-factory ^1.0 → ^1.1.0, psr/log ^2.0 || ^3.0 → ^3.0.1, symfony/config ^6.4 || ^7.0 → ^7.4, symfony/console ^6.4 || ^7.0 → ^7.4 and 19 more. Your build may pick other versions.

Security16
TYPO3 CMS: Destructive Actions on File Mount Folders
High
TYPO3 CMS has Broken Access Control in its Form Framework
High
TYPO3 CMS has Broken Access Control in its File Abstraction Layer
Low
TYPO3 CMS has Broken Access Control in its Form Framework
High
TYPO3 CMS has Insecure Deserialization via Core API
Moderate
TYPO3 CMS has Broken Access Control in Backend API
Moderate
TYPO3 CMS has Broken Access Control in the Recycler Module
Moderate
TYPO3 CMS has Broken Access Control in its Media Module
High
TYPO3 CMS has Cross-Site Scripting in Indexed Search
Moderate
TYPO3 CMS: Broken Access Control in Media Module
Moderate
TYPO3 CMS has Broken Access Control in its DataHandler
Moderate
TYPO3 CMS has an Open Redirect Vulnerability via Core Utilities
Moderate
TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool
Moderate
TYPO3 CMS exposes sensitive information in an error message
Moderate
TYPO3 CMS has an open‑redirect vulnerability
Moderate
TYPO3 CMS uses insufficient entropy when generating passwords
Moderate · CVSS 6.5