
webapp vulnerable to CVE-2021-44228
This project contains a local containerized setup featuring a frontend portal and an integrated backend gateway.
client/: Contains the static frontend files (index.html) using Bootstrap 5 and the API connection handler.docker-compose.yml: Local multi-container orchestration file.To start the services in the background (detached mode):
docker-compose up -d
To verify which containers are running:
docker-compose ps
To view output logs for the services (e.g. to troubleshoot connection attempts):
docker-compose logs -f
To stop the services and clean up the containers:
docker-compose down
[!WARNING] This compose setup runs the gateway backend container with elevated runtime privileges (
SYS_ADMINcapability andapparmor=unconfined). In production environments, running containers with these elevated configurations is discouraged as it exposes the host system to potential container breakout risks if the backend application is compromised. Always adhere to the principle of least privilege in container security.