Vendor
MegaEase EaseProbe versions up to 2.3.0 are vulnerable to remote access control bypass via manipulation of HTTP headers including X-Forwarded-For, X-Real-IP, and True-Client-IP.