The vulnerability in Adminer before version 5.4.3 involves the use of an insecure CSRF token scheme where the token format (rand XOR secret):rand transmits both components, allowing an attacker who observes a single token to recover the session secret via a single XOR operation. The session token's low entropy (~20 bits) enables brute-force attacks, and the use of loose comparison (==) in token verification facilitates PHP type juggling attacks. These weaknesses collectively allow an attacker to forge unlimited valid CSRF tokens, enabling cross-site request forgery against authenticated users and execution of arbitrary SQL queries.

An attacker who can observe a single CSRF token (through network sniffing, logs, referrer headers, or XSS) can recover the session secret and forge valid CSRF tokens. This enables cross-site request forgery attacks against authenticated sessions, potentially allowing execution of arbitrary SQL queries. The vulnerability compromises session integrity and can lead to unauthorized database manipulation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider mitigating exposure by restricting network access to Adminer interfaces, avoiding use in untrusted networks, and monitoring for suspicious activity. Avoid relying on the vulnerable CSRF token scheme.