Authorization Bypass

alextselegidis/easyappointments is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control checks on the GET, PUT, and DELETE endpoints for /customers/{customerId}, allowing low privileged users to fetch, modify, or delete other low privileged users (customers).