CVE-2025-51868

An Insecure Direct Object Reference (IDOR) vulnerability exists in Dippy (chat.dippy.ai) v2 within the conversation_history endpoint. The root cause is that the server fails to validate ownership or sharing status of conversation histories, allowing attackers to access other users' data by tamper...