{"id":55807,"date":"2020-01-29T00:00:00","date_gmt":"2020-01-28T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root"},"modified":"2020-02-18T14:03:57","modified_gmt":"2020-02-18T11:03:57","slug":"uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","title":{"rendered":"Zranitelnost v OpenSMTPD umo\u017e\u0148uj\u00edc\u00ed vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed k\u00f3du s pr\u00e1vy root","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>V rozv\u00edjen\u00e9m projektu OpenBSD po\u0161tovn\u00edm serveru <noindex><a rel=\"nofollow\" href=\"https:\/\/opensmtpd.org\/\">OpenSMTPD<\/a><\/noindex> byla odhalena <noindex><a rel=\"nofollow\" href=\"https:\/\/www.openwall.com\/lists\/oss-security\/2020\/01\/28\/3\">kritick\u00e1 zranitelnost<\/a><\/noindex> (CVE-2020-7247), co\u017e umo\u017e\u0148uje vzd\u00e1len\u00e9 prov\u00e1d\u011bn\u00ed shellov\u00fdch p\u0159\u00edkaz\u016f na serveru s pr\u00e1vy u\u017eivatele root. Zranitelnost byla odhalena b\u011bhem opakovan\u00e9ho auditu proveden\u00e9ho spole\u010dnost\u00ed Qualys Security (minul\u00fd audit OpenSMTPD <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=43090\">byl proveden<\/a><\/noindex> v roce 2015, a nov\u00e1 zranitelnost je p\u0159\u00edtomna od kv\u011btna 2018). Probl\u00e9m <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/misc@opensmtpd.org\/msg04850.html\">odstran\u011bna<\/a><\/noindex> ve verzi OpenSMTPD 6.6.2. V\u0161em u\u017eivatel\u016fm se doporu\u010duje neprodlen\u011b nainstalovat aktualizaci (pro OpenBSD lze opravu nainstalovat p\u0159es syspatch).<\/p>\n<p>Byly navr\u017eeny dva varianty \u00fatoku. Prvn\u00ed varianta funguje v p\u0159ednastaven\u00e9 konfiguraci OpenSMTPD (p\u0159\u00edjem po\u017eadavk\u016f pouze z localhostu) a umo\u017e\u0148uje vyu\u017e\u00edt probl\u00e9m lok\u00e1ln\u011b, kdy\u017e m\u00e1 \u00fato\u010dn\u00edk mo\u017enost p\u0159istoupit k m\u00edstn\u00ed s\u00ed\u0165ov\u00e9 rozhran\u00ed (loopback) na serveru (nap\u0159\u00edklad na hostingov\u00fdch syst\u00e9mech). Druh\u00e1 varianta se projev\u00ed v p\u0159\u00edpad\u011b nastaven\u00ed OpenSMTPD pro p\u0159\u00edjem extern\u00edch s\u00ed\u0165ov\u00fdch po\u017eadavk\u016f (po\u0161tovn\u00ed server, kter\u00fd p\u0159ij\u00edm\u00e1 extern\u00ed po\u0161tu). V\u00fdzkumn\u00edci p\u0159ipravili prototyp exploit, kter\u00fd \u00fasp\u011b\u0161n\u011b funguje jak s variantou OpenSMTPD v r\u00e1mci OpenBSD 6.6, tak s p\u0159enositelnou verz\u00ed pro jin\u00e9 opera\u010dn\u00ed syst\u00e9my (realizov\u00e1no v Debian Testing).<\/p>\n<p>Probl\u00e9m je zp\u016fsoben chybou v\u00a0funkci smtp_mailaddr(), kter\u00e1 se vol\u00e1 za \u00fa\u010delem ov\u011b\u0159en\u00ed spr\u00e1vnosti hodnot v\u00a0pol\u00edch \u201eMAIL FROM\u201c a \u201eRCPT TO\u201c, ur\u010duj\u00edc\u00edch odes\u00edlatele\/p\u0159\u00edjemce a p\u0159ed\u00e1van\u00fdch b\u011bhem spojen\u00ed s\u00a0po\u0161tovn\u00edm serverem. Pro ov\u011b\u0159en\u00ed \u010d\u00e1sti po\u0161tovn\u00ed adresy, kter\u00e1 je p\u0159ed symbolem \u201e@\u201c, se v\u00a0smtp_mailaddr() vol\u00e1 funkce<br \/>\nvalid_localpart(), kter\u00e1 pova\u017euje za platn\u00e9 (MAILADDR_ALLOWED) znaky \u201e!#$%&amp;\u2019*\/?^`{|}~+-=_\u201c, p\u0159i\u010dem\u017e vych\u00e1z\u00ed z\u00a0po\u017eadavk\u016f RFC 5322. <\/p>\n<p>P\u0159itom se p\u0159\u00edm\u00e9 escapov\u00e1n\u00ed \u0159et\u011bzce prov\u00e1d\u00ed ve funkci mda_expand_token(), kter\u00e1 nahrazuje pouze znaky \u201e!#$%&amp;\u2019*?`{|}~\u201c (MAILADDR_ESCAPE). D\u00e1le je \u0159et\u011bzec p\u0159ipraven\u00fd v mda_expand_token() pou\u017eit p\u0159i vol\u00e1n\u00ed doru\u010dovac\u00edho agenta (MDA) pomoc\u00ed p\u0159\u00edkazu \u2018execle(\u201e\/bin\/sh\u201c, \u201e\/bin\/sh\u201c, \u201e-c\u201c, mda_command,\u2026\u2018. V\u00a0p\u0159\u00edpad\u011b, \u017ee se zpr\u00e1va um\u00edst\u00ed do mbox prost\u0159ednictv\u00edm \/bin\/sh, se spust\u00ed \u0159et\u011bzec \u201e\/usr\/libexec\/mail.local -f %%{mbox.from} %%{user.username}\u201c, kde hodnota \u201e%{mbox.from}\u201c zahrnuje escapovan\u00e1 data z\u00a0parametru \u201eMAIL FROM\u201c.<\/p>\n<p>Podstata zranitelnosti spo\u010d\u00edv\u00e1 v\u00a0tom, \u017ee smtp_mailaddr() m\u00e1 logickou chybu, d\u00edky kter\u00e9 v\u00a0p\u0159\u00edpad\u011b pr\u00e1zdn\u00e9 dom\u00e9ny v\u00a0emailu funkce vrac\u00ed \u00fasp\u011b\u0161n\u00fd k\u00f3d ov\u011b\u0159en\u00ed, i kdy\u017e \u010d\u00e1st adresy p\u0159ed \u201e@\u201c obsahuje nepovolen\u00e9 znaky. D\u00e1le, p\u0159i p\u0159\u00edprav\u011b \u0159et\u011bzce funkc\u00ed mda_expand_token() nejsou escapov\u00e1ny v\u0161echny mo\u017en\u00e9 speci\u00e1ln\u00ed znaky shellu, ale pouze speci\u00e1ln\u00ed znaky povolen\u00e9 v\u00a0po\u0161tovn\u00ed adrese. T\u00edm p\u00e1dem sta\u010d\u00ed pro spu\u0161t\u011bn\u00ed sv\u00e9ho p\u0159\u00edkazu pou\u017e\u00edt v\u00a0lok\u00e1ln\u00ed \u010d\u00e1sti emailu znak \u201e;\u201c a mezeru, kter\u00e9 nepat\u0159\u00ed do skupiny MAILADDR_ESCAPE a nejsou escapov\u00e1ny. Nap\u0159\u00edklad:<\/p>\n<p>   $ nc 127.0.0.1 25<\/p>\n<p>   HELO professor.falken<br \/>\n   MAIL FROM:&lt;;sleep 66;&gt;<br \/>\n   RCPT TO:&lt;root&gt;<br \/>\n   DATA<br \/>\n   .<br \/>\n   QUIT<\/p>\n<p>Po t\u00e9to relaci OpenSMTPD p\u0159i doru\u010dov\u00e1n\u00ed do mbox spust\u00ed p\u0159es shell p\u0159\u00edkaz <\/p>\n<p>   \/usr\/libexec\/mail.local -f ;sleep 66; root<\/p>\n<p>P\u0159itom jsou mo\u017enosti \u00fatoku omezeny t\u00edm, \u017ee lok\u00e1ln\u00ed \u010d\u00e1st adresy nem\u016f\u017ee p\u0159es\u00e1hnout 64 znak\u016f, a speci\u00e1ln\u00ed znaky \u2018$\u2019 a \u2018|\u2019 se p\u0159i escapov\u00e1n\u00ed nahrazuj\u00ed za \u201e:\u201c. Pro obejit\u00ed tohoto omezen\u00ed se vyu\u017e\u00edv\u00e1 skute\u010dnost, \u017ee t\u011blo zpr\u00e1vy se p\u0159ed\u00e1v\u00e1 po spu\u0161t\u011bn\u00ed \/usr\/libexec\/mail.local prost\u0159ednictv\u00edm vstupn\u00edho proudu, tj. manipulac\u00ed s\u00a0adresou lze spustit pouze p\u0159\u00edkazov\u00fd interpret sh a vyu\u017e\u00edt t\u011blo zpr\u00e1vy jako mno\u017einu instrukc\u00ed. Vzhledem k\u00a0tomu, \u017ee na za\u010d\u00e1tku zpr\u00e1vy jsou uvedeny pomocn\u00e9 SMTP hlavi\u010dky, navrhuje se pro jejich p\u0159esko\u010den\u00ed pou\u017e\u00edt vol\u00e1n\u00ed p\u0159\u00edkazu read v\u00a0cyklu. Pracovn\u00ed exploit vypad\u00e1 zhruba takto:<\/p>\n<p>   $ nc 192.168.56.143 25<\/p>\n<p>   HELO professor.falken<br \/>\n   MAIL FROM:&lt;;for i in 0 1 2 3 4 5 6 7 8 9 a b c d;do read r;done;sh;exit 0;&gt;<br \/>\n   RCPT TO:&lt;root@example.org&gt;<br \/>\n   DATA<br \/>\n   #0<br \/>\n   #1<br \/>\n   &#8230;<br \/>\n   #d<br \/>\n   for i in W O P R; do<br \/>\n        echo -n \u201e($i) \u201c &amp; &amp;&amp; id || break<br \/>\n   done &gt; \/root\/x.\u201e`id -u`\u201c.$$<br \/>\n   .<br \/>\n   QUIT<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52267\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenBSD \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 OpenSMTPD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2020-7247), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c shell-\u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Qualys Security (\u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u0430\u0443\u0434\u0438\u0442 OpenSMTPD \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0441\u044f \u0432 2015 \u0433\u043e\u0434\u0443, \u0430 \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u043c\u0430\u044f 2018 \u0433\u043e\u0434\u0430). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 OpenSMTPD 6.6.2. \u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55807","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenBSD \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 OpenSMTPD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenSMTPD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenBSD \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 OpenSMTPD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-28T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:57+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnost v OpenSMTPD, kter\u00e1 umo\u017e\u0148uje vzd\u00e1len\u00e9 proveden\u00ed k\u00f3du s pr\u00e1vy root | ProHoster","description":"V rozv\u00edjen\u00e9m projektu OpenBSD byla na po\u0161tovn\u00edm serveru OpenSMTPD odhalena","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 OpenSMTPD, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenBSD \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 OpenSMTPD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimost-v-opensmtpd-pozvolyayushhaya-udalyonno-vypolnit-kod-s-pravami-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-28T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55807","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:36:30","updated":"2022-10-09 15:09:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55807","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=55807"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55807\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=55807"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=55807"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=55807"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}