Log4Shell CVE-2021-44228 JNDI Injection in HTTP Request Headers

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•1

Detects attempts to exploit the Log4Shell vulnerability (CVE-2021-44228) by identifying JNDI lookup strings (e.g., ${jndi:ldap://, ${jndi:rmi://, ${jndi:dns://) within HTTP request headers, a technique used to trigger remote code execution in vulnerable Java applications using the Log4j library.