Authorization Bypass

alextselegidis/easyappointments is vulnerable to Authorization Bypass. The vulnerability is due to insufficient access control checks on the POST /providers endpoint, allowing low privileged users to create privileged users (providers), resulting in privilege escalation.