Cross-site Request Forgery (CSRF)

archivy is vulnerable to cross-site request forgery. The vulnerability exists in the route /dataobj/delete/ of routes.py because the csrf token is not verified which allows an attacker to delete user's notes...