Skip to content
Threat Feed
Subscribe

Product

EaseProbe (<= 2.3.0)

1 brief RSS
medium advisory

Improper Access Control in MegaEase EaseProbe

MegaEase EaseProbe versions up to 2.3.0 are vulnerable to remote access control bypass via manipulation of HTTP headers including X-Forwarded-For, X-Real-IP, and True-Client-IP.

EaseProbe web-vulnerability access-control
1r 1t 1c