{"id":102446,"date":"2021-12-02T21:36:39","date_gmt":"2021-12-02T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov"},"modified":"2021-12-02T21:36:39","modified_gmt":"2021-12-02T19:36:39","slug":"uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","title":{"rendered":"Haavatavus Mozilla NSS-is, mis v\u00f5imaldab koodi k\u00e4ivitamist sertifikaatide t\u00f6\u00f6tlemise k\u00e4igus","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mozilla'i arendatavates NSS (Network Security Services) kr\u00fcptograafia raamatukogudes tuvastati kriitiline haavatavus (CVE-2021-43527), mis v\u00f5ib p\u00f5hjustada r\u00fcndaja koodi t\u00e4itmist DSA v\u00f5i RSA-PSS digitaalsete allkirjade t\u00f6\u00f6tlemisel, mis on m\u00e4\u00e4ratud DER (Distinguished Encoding Rules) koodimise meetodi abil. Probleem, mille koodinimi on BigSig, on lahendatud NSS versioonides 3.73 ja NSS ESR 3.68.1. Paketi uuendused on saadaval Debian, RHEL, Ubuntu, SUSE, Arch Linux, Gentoo, FreeBSD distributsioonides. Fedora jaoks pole uuendusi veel saadaval.    <\/p>\n<p> Probleem ilmneb rakendustes, mis kasutavad NSS-i CMS, S\/MIME, PKCS #7 ja PKCS #12 digitaalsete allkirjade t\u00f6\u00f6tlemiseks v\u00f5i sertifikaatide kinnitamiseks TLS, X.509, OCSP ja CRL rakendustes. Haavatavus v\u00f5ib esineda erinevates TLS, DTLS ja S\/MIME toega kliendi- ja serverirakendustes, postiklientides ja PDF-vaatlejates, mis kasutavad NSS-i funktsiooni CERT_VerifyCertificate() digitaalsete allkirjade kontrollimiseks.     <\/p>\n<p>Haavatavate rakenduste n\u00e4idetena nimetatakse LibreOffice'i, Evolutioni ja Evince'i. Potentsiaalselt v\u00f5ivad probleemist olla m\u00f5jutatud ka sellised projektid nagu Pidgin, Apache OpenOffice, Suricata, Curl, Chrony, Red Hat Directory Server, Red Hat Certificate System, mod_nss Apache http-server\u2019y jaoks, Oracle Communications Messaging Server, Oracle Directory Server Enterprise Edition. Samas ei ilmne haavatavus Firefoxis, Thunderbirdis ja Tor Browseris, kus kinnitamiseks kasutatakse eraldi raamatukogu mozilla::pkix, mis kuulub samuti NSS-i. Chromiumi p\u00f5hised brauserid ei ole samuti haavatavad (kui neid ei ole spetsiaalselt NSS-iga kompileeritud), kuna nad kasutasid NSS-i kuni 2015. aastani, kuid seej\u00e4rel viidi \u00fcle BoringSSL-ile.    <\/p>\n<p>Haavatavus tuleneb vea olemasolust sertifikaatide kinnitamise kontrolli koodis funktsioonis vfy_CreateContext failist secvfy.c. Vea ilmnemine on seotud nii kliendilt sertifikaadi lugemisega serverist kui ka t\u00f6\u00f6tlemisega. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/server\/dts-prohoster\/\"   title=\"serverilt\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3028\">serverilt<\/a> kliendi sertifikaatide puhul. Digitaalsete allkirjade kontrollimise protsessis, mis on kodeeritud DER-meetodi abil, dekodeerib NSS allkirja fikseeritud suurusega puhvri ja edastab selle PKCS #11 moodulile. Edasi t\u00f6\u00f6tlemisel, DSA ja RSA-PSS allkirjade puhul ei kontrollita suurust \u00f5igesti, mis toob kaasa puhver\u00fclekande VFYContextStr struktuuri jaoks, kui digitaalsete allkirjade suurus \u00fcletab 16384 bitti (puhvri jaoks on eraldatud 2048 baiti, kuid ei kontrollita, et allkiri v\u00f5ib olla suurem).    <\/p>\n<p>Haavatavusega kood on j\u00e4lgitav alates 2003. aastast, kuid see ei olnud ohtlik kuni 2012. aastal toimunud refaktooringuni. 2017. aastal RSA-PSS toetuse juurutamisel tehti sama viga. R\u00fcnnaku tegemiseks ei ole vajalik ressursside intensiivne teatud v\u00f5tmete genereerimine vajalike andmete saamiseks, kuna \u00fcleujutus toimub enne digitaalallkirja kehtivuse kontrollimist. Piiridest v\u00e4ljas olev osa andmeid kirjutatakse m\u00e4lu-alasse, mis sisaldab funktsioonide n\u00e4itajaid, mis lihtsustab t\u00f6\u00f6tavate eksploitide loomist.    <\/p>\n<p>Haavatavus tuvastati Google Project Zero teadlaste poolt uute fuzzing-testimise meetodite katsetamisel ja on hea n\u00e4ide sellest, kuidas laialdaselt testitud tuntud projekti sees v\u00f5ivad p\u00fcsida triviaalsete haavatavuste j\u00e4lgedes.  <\/p>\n<ul>\n<li class=\"l\"> NSS koodi toetab kogenud meeskond, kes vastutab turvalisuse eest ja rakendab kaasaegseid testimise ja vigade anal\u00fc\u00fcsi meetodeid. T\u00f6\u00f6tavad mitmed programmid, mis maksavad olulisi preemiaid NSS-is tuvastatud haavatavuste eest.\n<li class=\"l\">  NSS oli \u00fcks esimesi projekte, mis liitus Google'i oss-fuzzi algatusega ja seda testiti ka Mozilla arendatavas fuzzy-testeerimise s\u00fcsteemis, mis p\u00f5hineb libFuzzeril.\n<li class=\"l\"> Raamatukogu kood on korduvalt kontrollitud erinevates staatilistes anal\u00fc\u00fcsijates, sealhulgas alates 2008. aastast Coverity teenuses.\n<li class=\"l\"> Kuni 2015. aastani kasutati NSS-i Google Chrome'is ja seda kontrolliti s\u00f5ltumatult Mozilla meeskonna poolt (alates 2015. aastast on Chrome liikunud BoringSSL-i, kuid NSS-i p\u00f5hine port j\u00e4tkab toetust).    <\/ul>\n<p>P\u00f5hiprobleemid, miks probleem kaua t\u00e4helepanuta j\u00e4i:  <\/p>\n<ul>\n<li class=\"l\"> NSS moodulaarne teek ja fuzzing-testimine viidi l\u00e4bi mitte tervikuna, vaid eraldi komponentide tasandil. N\u00e4iteks kontrolliti eraldi DER-dekoodimiskoodi ja sertifikaatide t\u00f6\u00f6tlemist \u2014 fuzzing'i k\u00e4igus v\u00f5idi saada sertifikaat, mis t\u00f5i esile k\u00e4sitletava haavatavuse, kuid selle kontroll ei j\u00f5udnud verifitseerimiskoodini ja probleem ei avaldunud.\n<li class=\"l\"> Fuzzing-testimise ajal kehtestati v\u00e4ljundi suurusele ranged piirangud (10000 bait), samas kui NSS-is ei olnud selliseid piiranguid (paljud struktuurid normaalses re\u017eiimis v\u00f5isid olla suuremad kui 10000 bait, mist\u00f5ttu probleemide avastamiseks oli vajalik suurem sisendandmete maht). T\u00e4ielikuks kontrollimiseks pidi piir olema 224-1 baiti (16 MB), mis vastab TLS-is lubatud maksimaalsele sertifikaadi suurusele.\n<li class=\"l\"> Vale arusaam fuzzing-testimise kodekatte ulatusest. Haavatavat koodi testiti aktiivselt, kuid kasutati fuzzer'e, mis ei suutnud genereerida vajalikke sisendandmeid. N\u00e4iteks fuzzer tls_server_target kasutas etteantud komplekti valmis sertifikaate, mis piiras sertifikaadi verifitseerimise koodi kontrolli ainult TLS-s\u00f5numitega ja protokolli olekumuutustega.    <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56268\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 DSA \u0438\u043b\u0438 RSA-PSS, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DER (Distinguished Encoding Rules). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f BigSig, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 NSS 3.73 \u0438 NSS ESR 3.68.1. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102446","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus Mozilla NSS-is, mis v\u00f5imaldab koodi t\u00e4itmist sertifikaatide t\u00f6\u00f6tlemisel | ProHoster","description":"Mozilla arendatavates NSS (Network Security Services) kr\u00fcptograafia raamatukogudes avastati kriitiline haavatavus (CVE-2021-43527), mis v\u00f5ib p\u00f5hjustada pahatahtliku koodi t\u00e4itmist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-02T19:36:39+00:00","article:modified_time":"2021-12-02T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-02 19:38:04","updated":"2026-02-09 21:46:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102446\/revisions"}],"predecessor-version":[{"id":160309,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102446\/revisions\/160309"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}