https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T21:45:34.757526+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2014-avi-234 certfr-2014-avi-234 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-26T21:45:34.819874+00:00 certfr-2014-avi-234 https://cve.radiocsirt.org/vuln/euvd-2026-96779 EUVD-2026-96779 2026-10-26T21:45:34.819916+00:00 EUVD-2026-96779 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0216 fkie_cve-2014-0216 2026-10-26T21:45:34.819932+00:00

The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.

 https://cve.radiocsirt.org/vuln/ghsa-8rc7-4qfv-4484 GHSA-8rc7-4qfv-4484 — Moodle does not properly restrict file access 2026-10-26T21:45:34.819962+00:00

Affected: Packagist: moodle/moodle

The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.

 https://cve.radiocsirt.org/vuln/gsd-2014-0216 gsd-2014-0216 2026-10-26T21:45:34.819987+00:00 gsd-2014-0216