Exploit Public Facing Application via Apache Commons Text (Text4Shell)

The analytic detects attempts to exploit the CVE-2022-42889 vulnerability in the Apache Commons Text Library, known as Text4Shell. It identifies suspicious HTTP requests containing specific lookup keys (url, dns, script, env, file, getRuntime, java, localhost, properties, resource, sys, xml, base) that can lead to Remote Code Execution (RCE). This activity targets a critical vulnerability that can allow attackers to execute arbitrary code on the server, potentially leading to full system compromise, data exfiltration, or further lateral movement.