TYPO3 11.5.48 ELTS

Release Notes

Version 11.5.48 ELTS

Stay secure and up-to-date with TYPO3 ELTS!

The TYPO3 CMS community supported from 2020-12-22 until 2024-10-31.
Extend your support now until 2027-10-31 to get access to the latest security and compatibility updates for this version.

Learn more about TYPO3 ELTS Browse the TYPO3 ELTS Portal

Release Notes for TYPO3 CMS 11.5.48

This document contains information about TYPO3 CMS 11.5.48 which was released on 09.09.2025.

Get TYPO3 11.5.48 now

Checksums of TYPO3 11.5.48

SHA256

78c9518e4c4f87bb74973bdfc412fbc84955745b5fa838b94977d1aa28d4ce3c typo3_src-11.5.48.tar.gz
4170c3931b714934f898be4e2f596dec7ddbb6a5317ff6eee765ebcfa7366a5e typo3_src-11.5.48.zip

SHA1

19c4a6811fc26544ac69ca016f2799e44ff10ae1 typo3_src-11.5.48.tar.gz
c7b39e06f265e173130acf667fba7110447d51e7 typo3_src-11.5.48.zip

MD5

d41d8cd98f00b204e9800998ecf8427e typo3_src-11.5.48.tar.gz
d41d8cd98f00b204e9800998ecf8427e typo3_src-11.5.48.zip

Package Signatures

TYPO3 Release Packages (the downloadable tarballs and zip files) as well as Git tags are signed using PGP signatures during the automated release process. Besides that, MD5 and SHA2-256 hashes are being generated for these files. Find more details on verifying signatures and hashes in the infrastructure guide.

Upgrading

The usual upgrading procedure applies. No database updates are necessary. It might be required to clear all caches; the "important actions" section in the TYPO3 Install Tool offers the accordant possibility to do so.

Changes

Here is a list of what was fixed since 11.5.47:

  • 2025-09-09 9db9e1e4a5 [RELEASE] Release of TYPO3 11.5.48 (thanks to Andreas Kienast)
  • 2025-09-09 4c9d9c134d [SECURITY] Prevent Information Disclosure in record list downloader (thanks to Benjamin Franzke)
  • 2025-09-09 a78f886112 [SECURITY] Avoid displaying version details to unauthorized users (thanks to Oliver Hader)
  • 2025-09-09 7c786dbaf9 [SECURITY] Inherit access to module-related AJAX routes from modules (thanks to Elias Häußler)
  • 2025-09-09 398f353ef0 [SECURITY] Prevent information disclosure via filesystem E_WARNING errors (thanks to Andreas Kienast)
  • 2025-09-09 1ba5a71600 [SECURITY] Properly catch FAL exceptions in ShortcutRepository (thanks to Oliver Hader)
  • 2025-09-09 076fa76540 [SECURITY] Fix open redirection via GeneralUtility::sanitizeLocalUrl (thanks to Benjamin Franzke)
  • 2025-08-14 ddfbd210d4 [TASK] Set TYPO3 version to 11.5.48-dev (thanks to Andreas Kienast)