Splunk Enterprise

Can I use exsl:document in Splunk ?

WOOOOONG__HERO
New Member

Hello. I am a security researcher analysing the CVE-2023-46214 vulnerability. 

I think this vulnerability have a problem using exsl:document.

So I want to block packets containing exsl:document, but do you use exsl:document in real life?

Is this a feature that is officially supported by Splunk?

Labels (1)
0 Karma

bowesmana
SplunkTrust
SplunkTrust
0 Karma

WOOOOONG__HERO
New Member

Yes. I know.
But what I'm wondering is if you actually use <exsl:document>, and if you do, how you use it formally, and if you don't mind blocking packets containing that namespace.

0 Karma
Get Updates on the Splunk Community!

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...

Stay Connected: Your Guide to February Tech Talks, Office Hours, and Webinars!

&#x1f48c;Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...