Authorization Bypass

alextselegidis/easyappointments is vulnerable to is vulnerable to Authorization Bypass. The vulnerability is due to improper authorization checks in the GET, PUT, and DELETE methods for the /categories/{categoryId} endpoint. This allows a low-privileged user to fetch, modify, or delete the category data of any user, including administrators, resulting in unauthorized access and data manipulation. Attackers can exploit this to alter or delete sensitive information without proper authorization.