Zozozoe

**Name of the Vulnerable Software and Affected Versions** MegaEase EaseProbe versions prior to 2.3.1 **Description** A flaw in the Middleware component within the `realIP()` function of the `web/server.go` file allows for improper access controls. This issue occurs when the `X-Forwarded-For`, `X-Real-IP`, or `True-Client-IP` arguments are manipulated, enabling a remote attacker to bypass security restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict or validate the `X-Forwarded-For`, `X-Real-IP`, and `True-Client-IP` headers to prevent unauthorized access via the `realIP()` function.