EaseProbe vulnerabilities
2 known vulnerabilities in EaseProbe from MegaEase. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest first
- 7.3 High severity
EaseProbe: Incorrect Privilege Assignment
A flaw has been found in MegaEase EaseProbe up to 2.3.0. Affected is the function realIP of the file web/server.go of the component Middleware. This manipulation of the argument X-Forwarded-For/X-Real-IP/True-Client-IP causes improper access controls. The atta
- 9.8 Critical severity
easeprobe: Improper Neutralization of Special Elements used in an SQL Command
EaseProbe is a tool that can do health/status checking. An SQL injection issue was discovered in EaseProbe before 2.1.0 when using MySQL/PostgreSQL data checking. This problem has been fixed in v2.1.0.