{"id":120895,"date":"2024-12-08T21:46:03","date_gmt":"2024-12-08T19:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt"},"modified":"2024-12-08T21:46:03","modified_gmt":"2024-12-08T19:46:03","slug":"uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","title":{"rendered":"Vulnerabilit\u00e0 che consentono di manomettere le immagini e eseguire codice sui server ASU del progetto OpenWrt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nel progetto in via di sviluppo OpenWrt, il toolkit ASU (Attended SysUpgrade) ha rivelato vulnerabilit\u00e0 critiche (CVE-2024-54143) che consentono di compromettere gli artefatti di build distribuiti tramite il servizio sysupgrade.openwrt.org o server ASU di terze parti, riuscendo ad installare immagini firmware modificate dall'attaccante nei sistemi degli utenti che utilizzano la modalit\u00e0 'attended upgrade' tramite l'interfaccia web selector.openwrt.org o il toolkit da riga di comando attended.sysupgrade.     <\/p>\n<p>Per eseguire con successo l'attacco, l'aggressore deve solo inviare una richiesta di generazione di un pacchetto al server ASU (simili richieste possono essere inviate da qualsiasi utente senza autenticazione). Attraverso manipolazioni con un elenco di pacchetti appositamente formattato, l'attaccante pu\u00f2 organizzare l'invio di immagini dannose precedentemente generate in risposta a legittime richieste di assemblaggio provenienti da altri utenti.        <\/p>\n<p>Il servizio ASU viene utilizzato in OpenWrt per generare e installare aggiornamenti del firmware senza perdere le impostazioni esistenti e i pacchetti installati dall'utente. Attraverso l'interfaccia web o lo strumento a riga di comando, l'utente invia una richiesta per generare un'immagine di firmware aggiornata, specificando i pacchetti installati nel proprio sistema. Dopo un certo tempo, il server ASU genera l'immagine corrispondente al contenuto richiesto, dopodich\u00e9 l'utente la scarica e la installa sul proprio dispositivo. Viene inoltre fornita un'opzione che consente di mantenere le impostazioni esistenti nel firmware aggiornato.       <\/p>\n<p>L'elaborazione delle richieste degli utenti \u00e8 gestita dal server ASU, che avvia la generazione automatica delle immagini del firmware utilizzando lo strumento ImageBuilder e sostiene una cache di assemblaggi precedentemente preparati. Nel caso in cui l'utente richieda un'immagine che \u00e8 gi\u00e0 stata assemblata in precedenza <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/dts-newyork\/\"   title=\"server\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2797\">server<\/a> , e mantiene la sua validit\u00e0, il sistema restituisce immediatamente l'immagine disponibile dalla cache senza avviare il processo di assemblaggio.    <\/p>\n<p>Il comportamento dell'attacco \u00e8 stato reso possibile grazie a due vulnerabilit\u00e0:  <\/p>\n<ul>\n<li class=\"l\"> Una vulnerabilit\u00e0 nel gestore delle richieste build_reques.py all'interno dell'implementazione di Imagebuilder consente l'inserimento di comandi personali nel processo di costruzione attraverso la trasmissione di nomi di pacchetti appositamente formati dall'utente. La vulnerabilit\u00e0 \u00e8 causata dalla mancanza di un'adeguata verifica dei caratteri speciali nei nomi dei pacchetti prima del loro utilizzo tra gli argomenti dell'utility make. Sfruttando questa vulnerabilit\u00e0, un attaccante pu\u00f2 formare sul server immagini dannose del firmware, firmate con la corretta chiave di costruzione.\n<li class=\"l\"> Una vulnerabilit\u00e0 nella libreria util.py, causata dal fatto che gli hash SHA-256 utilizzati per verificare l'esistenza di immagini firmware gi\u00e0 pronte nella cache venivano troncati a 12 caratteri, riduceva significativamente il livello di entropia e permetteva, tramite la generazione di collisioni, di creare un'immagine dannosa il cui hash corrispondeva a quello di un'immagine legittima. In combinazione con la vulnerabilit\u00e0 in Imagebuilder, il problema con gli hash poteva essere sfruttato dall'attaccante per 'contaminare' la cache del server ASU e inserire immagini dannose che venivano restituite alle richieste degli utenti normali.    <\/ul>\n<p>La modifica, a seguito della quale \u00e8 stata possibile l'esecuzione dell'attacco, \u00e8 stata apportata l'8 luglio. Il problema \u00e8 stato risolto il 4 dicembre. Per garantire il funzionamento del servizio ASU sono stati utilizzati <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/\"   title=\"servers\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1974\">servers<\/a>, sistemi separati, non sovrapposti ai principali sistemi di costruzione del progetto, isolati da OpenWrt Buildbot e privi di accesso a risorse riservate come chiavi SSH e certificati per la generazione di firme digitali.     <\/p>\n<p>Si sostiene che gli sviluppatori di OpenWrt non abbiano trovato tracce di compromissione dell'infrastruttura del progetto, ma per sicurezza hanno reinstallato da zero i sistemi sui quali venivano eseguiti i componenti vulnerabili. Il problema non ha riguardato le immagini ufficiali distribuite tramite il sito downloads.openwrt.org, e nell'analisi dei log di costruzione non sono state trovate tracce di invio di richieste dannose. Tuttavia, poich\u00e9 sui server ASU viene effettuata una pulizia automatica delle costruzioni pi\u00f9 vecchie di 7 giorni, \u00e8 stato impossibile condurre un audit delle vecchie costruzioni.       <\/p>\n<p>La probabilit\u00e0 di utilizzo delle vulnerabilit\u00e0 identificate nella pratica per la diffusione di immagini dannose attraverso l'infrastruttura di OpenWrt \u00e8 ritenuta dai rappresentanti di OpenWrt vicina allo zero; tuttavia, agli utenti dell'ASU si raccomanda di sostituire i firmware OpenWrt sui propri dispositivi con la stessa versione.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62371\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &#171;attended upgrade&#187; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120895","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u00e0 che consentono di sostituire le immagini e eseguire codice sui server ASU del progetto OpenWrt | ProHoster","description":"Nel progetto in sviluppo OpenWrt, gli strumenti ASU (Attended SysUpgrade) hanno rivelato vulnerabilit\u00e0 critiche (CVE-2024-54143) che permettono di compromettere gli artefatti di build distribuiti attraverso il servizio.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-08T19:46:03+00:00","article:modified_time":"2024-12-08T19:46:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120895","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:43:20","updated":"2026-02-09 22:04:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/120895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=120895"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/120895\/revisions"}],"predecessor-version":[{"id":160077,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/120895\/revisions\/160077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=120895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=120895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=120895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}