description: If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid and HTTP Strict Transport Security (HSTS) will not be enabled for the connection. This vulnerability affects Firefox < 55.
problem types: Failure to enable HSTS when two STS headers are sent for a connection
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 55, status: affected, version: unspecified, versionType: custom
}