This issue allows an attacker to read data stored by Firefox’s IndexedDB component. The flaw is an information exposure weakness (CWE‑200) that can reveal private information kept within web applications, including sensitive user data and application secrets. Based on the description, an attacker who can load malicious or compromised web content may trigger the disclosure of data that was intended to remain confidential.

Mozilla Firefox browsers prior to version 158 on standard releases, and prior to version 153.5 on the Extended Support Release version, are impacted. Systems using these editions should verify whether the IndexedDB feature is enabled for any web content that may store or process sensitive data.

The CVSS score of 4.3 indicates a moderate severity, and the EPSS score is not available. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is a malicious or compromised web page that instructs the browser to access data in IndexedDB; based on the description, it is inferred that such a page could be served to a user to leak stored information. Until the browser is updated, the vulnerability remains exploitable via crafted web content.