CVE-2014-0216: The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2...

Security readout for executives and security teams

CVE-2014-0216 is an information-disclosure flaw in Moodle’s HTML block file handling for the My Home area. A remote attacker could obtain sensitive information by visiting an HTML block. The cited sources do not provide CVSS scoring or evidence of active exploitation. Exposure is likely limited to Moodle deployments running the affected 2.3, 2.4, 2.5, or 2.6 versions with HTML blocks and accessible My Home content. Prioritize remediation for internet-facing or broadly accessible Moodle systems because the impact is sensitive information exposure. Urgency is lower than confirmed exploited critical vulnerabilities, but unsupported Moodle versions should be addressed promptly. Mitigation focus: Upgrade affected Moodle branches to a fixed or currently supported vendor release.; Review Moodle advisory details for MDL-43877 before planning remediation.; Restrict access to exposed Moodle instances until version status is confirmed..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.