Hello. I am a security researcher analysing the CVE-2023-46214 vulnerability.
I think this vulnerability have a problem using exsl:document.
So I want to block packets containing exsl:document, but do you use exsl:document in real life?
Is this a feature that is officially supported by Splunk?
Yes. I know.
But what I'm wondering is if you actually use <exsl:document>, and if you do, how you use it formally, and if you don't mind blocking packets containing that namespace.