cve/2023/CVE-2023-34037.md

### [CVE-2023-34037](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34037)
![](https://img.shields.io/static/v1?label=Product&message=VMware%20Horizon%20Server&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20Horizon%20Server%202306%2C%20Horizon%20Server%202303%2C%20Horizon%20Server%202212%2C%20Horizon%20Server%202209%2C%20Horizon%20Server%202206%2C%20Horizon%20Server%202111.x%2C%20Horizon%20Server%202106%2C%20Horizon%20Server%202103%2C%20Horizon%20Server%202012%2C%20Horizon%20Server%202006%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Request%20smuggling%20vulnerability&color=brighgreen)

### Description

VMware Horizon Server contains a HTTP request smuggling vulnerability. A malicious actor with network access may be able to perform HTTP smuggle requests.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/grampae/VMSA-2023-0017