{"id":38040,"date":"2019-10-31T22:21:20","date_gmt":"2019-10-31T19:21:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros\/"},"modified":"2021-02-01T11:37:46","modified_gmt":"2021-02-01T09:37:46","slug":"propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros","title":{"rendered":"Izlabojiet Exim \u2014 izlabojiet v\u0113lreiz. Jauna Remote Command Execution ievainojam\u012bba Exim 4.92 vien\u0101 piepras\u012bjum\u0101.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Izlabojiet Exim \u2014 izlabojiet v\u0113lreiz. Jauna Remote Command Execution ievainojam\u012bba Exim 4.92 vien\u0101 piepras\u012bjum\u0101.\" src=\"\/wp-content\/uploads\/2019\/09\/0bb4edaf80bcc0b602bf57c9d3b916be.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p>Pavisam nesen, vasaras s\u0101kum\u0101, par\u0101d\u012bj\u0101s masveida aicin\u0101jumi atjaunot Exim uz versiju 4.92, \u0146emot v\u0113r\u0101 CVE-2019-10149 ievainojam\u012bbu (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/455598\/\">Steidzami atjauniniet exim l\u012bdz 4.92 \u2014 notiek akt\u012bva infic\u0113\u0161ana \/ Habr.<\/a><\/noindex>). Un nesen noskaidroj\u0101s, ka \u013caunprogrammat\u016bra Sustes nol\u0113ma izmantot \u0161o ievainojam\u012bbu.<\/p>\n<p>Tagad visi steidzamaj\u0101 atjaunin\u0101\u0161an\u0101 var atkal \"priec\u0101ties\": 2019. gada 21. j\u016blij\u0101 p\u0113tnieks Zerons atkl\u0101ja kritisku ievainojam\u012bbu <strong>Exim Mail Transfer agent (MTA) lietojot TLS<\/strong> versij\u0101m no <strong>4.80 l\u012bdz 4.92.1<\/strong> ieskaitot, \u013caujot att\u0101lin\u0101ti <strong>izpild\u012bt kodu ar privile\u0123\u0113t\u0101m ties\u012bb\u0101m.<\/strong> (<noindex><a rel=\"nofollow\" href=\"https:\/\/exim.org\/static\/doc\/security\/CVE-2019-15846.txt\">CVE-2019-15846<\/a><\/noindex>).<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3 id=\"uyazvimost\">Ievainojam\u012bba<\/h3>\n<p>Ievainojam\u012bba past\u0101v, ja izmanto GnuTLS vai OpenSSL bibliot\u0113kas, veidojot dro\u0161u TLS savienojumu.<\/p>\n<p>Saska\u0146\u0101 ar izstr\u0101d\u0101t\u0101ja Heiko Schlittermann teikto, Exim konfigur\u0101cijas fails p\u0113c noklus\u0113juma neizmanto TLS, tom\u0113r daudzi izplat\u012bjumi instal\u0101cijas laik\u0101 izveido nepiecie\u0161am\u0101s sertifik\u0101tus un iek\u013cauj dro\u0161u savienojumu. Ar\u012b jaun\u0101k\u0101s Exim versijas iestata opciju <em>tls_advertise_hosts=*<\/em> un \u0123ener\u0113 nepiecie\u0161amos sertifik\u0101tus.<\/p>\n<blockquote><p>atkar\u012bgs no konfigur\u0101cijas. P\u0101r\u0113j\u0101s distros to parasti aktiviz\u0113 p\u0113c noklus\u0113juma, bet Exim prasa sertifik\u0101tu + atsl\u0113gu, lai darbotu k\u0101 TLS serveris. Dro\u0161i vien distros izveido sertifik\u0101tu instal\u0113\u0161anas laik\u0101. Jauniem Exim izdevumiem ir opcija tls_advertise_hosts, kas p\u0113c noklus\u0113juma ir &#171;*&#187;, un, ja nav nodro\u0161in\u0101ts cits, tiek izveidots pa\u0161a parakst\u012bts sertifik\u0101ts.<\/p><\/blockquote>\n<p>Ievainojam\u012bba sl\u0113pjas nepareiz\u0101 SNI (Server Name Indication, tehnolo\u0123ija, kas ieviesta 2003. gad\u0101 RFC 3546, lai klients var\u0113tu piepras\u012bt atbilsto\u0161u sertifik\u0101tu dom\u0113na nosaukumam, <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/webo\/blog\/327410\/\">TLS SNI standarta izplat\u012bba \/ WEBO Group blogs \/ Habr<\/a><\/noindex>) TLS rokas spiediena laik\u0101. Uzbruc\u0113jam pietiek nos\u016bt\u012bt SNI, kas beidzas ar atpaka\u013csl\u012bpsv\u012btru (&#171;&#187;) un nulles simbolu (&#187; &#171;).<\/p>\n<p>P\u0113tnieki no uz\u0146\u0113muma Qualys atkl\u0101ja k\u013c\u016bdu funkcij\u0101 string_printing(tls_in.sni), kas saist\u012bta ar nepareizu atlik\u0161anu &#171;&#187;. Rezult\u0101t\u0101 atpaka\u013csl\u012bpsv\u012btra tiek ierakst\u012bta neizk\u0101rtot\u0101 veid\u0101 drukas spoles galvenes fail\u0101. P\u0113c tam \u0161is fails ar privil\u0113\u0123\u0113t\u0101m ties\u012bb\u0101m tiek nolas\u012bts funkcij\u0101 spool_read_header(), kas noved pie kaudzes p\u0101rpild\u012b\u0161an\u0101s (heap overflow).<\/p>\n<p><strong>J\u0101atz\u012bm\u0113, ka \u0161obr\u012bd Exim izstr\u0101d\u0101t\u0101ji ir izveidoju\u0161i PoC ievainojam\u012bbu ar komandu izpildi att\u0101lin\u0101t\u0101 ievainojamaj\u0101 server\u012b, ta\u010du publiskaj\u0101 pieejam\u012bb\u0101 tas v\u0113l nav pieejams. \u0145emot v\u0113r\u0101 k\u013c\u016bdas exploitation vienk\u0101r\u0161\u012bbu, t\u0101 ir vien\u012bgi laika jaut\u0101jums, turkl\u0101t diezgan \u012bss.<\/strong><\/p>\n<p>Ar detaliz\u0113tu uz\u0146\u0113muma Qualys p\u0113t\u012bjumu var iepaz\u012bties <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Exim\/exim\/blob\/master\/doc\/doc-txt\/cve-2019-15846\/qualys.mbx\">\u0161eit<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"Izlabojiet Exim \u2014 izlabojiet v\u0113lreiz. Jauna Remote Command Execution ievainojam\u012bba Exim 4.92 vien\u0101 piepras\u012bjum\u0101.\" src=\"\/wp-content\/uploads\/2019\/09\/435bc2e3828affdc9be2816036530718.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><em>SNI izmanto\u0161ana TLS<\/em><\/p>\n<h3 id=\"kolichestvo-potencialno-uyazvimyh-publichnyh-serverov\">Potenci\u0101li neaizsarg\u0101tu publisko serveru skaits<\/h3>\n<p>Saska\u0146\u0101 ar liel\u0101 hostinga pakalpojumu sniedz\u0113ja statistiku <strong>E-Soft Inc<\/strong> uz 1. septembri, \u012br\u0113tajos serveros versija 4.92 tiek izmantota vair\u0101k nek\u0101 70% hostu.<\/p>\n<p>Versija<br \/>\nServeru skaits<br \/>\nProcenti<\/p>\n<p>4.92.1<br \/>\n6471<br \/>\n1.28%<\/p>\n<p><strong>4.92<\/strong><br \/>\n<strong>376436<\/strong><br \/>\n<strong>74.22%<\/strong><\/p>\n<p>4.91<br \/>\n58179<br \/>\n11.47%<\/p>\n<p>4.9<br \/>\n5732<br \/>\n1.13%<\/p>\n<p>4.89<br \/>\n10700<br \/>\n2.11%<\/p>\n<p>4.87<br \/>\n14177<br \/>\n2.80%<\/p>\n<p>4.84<br \/>\n9937<br \/>\n1.96%<\/p>\n<p>Citas versijas<br \/>\n25568<br \/>\n5.04%<\/p>\n<p><em>E-Soft Inc statistika<\/em><\/p>\n<p>Ja v\u0113r\u0161amies pie mekl\u0113t\u0101jprogrammas <noindex><a rel=\"nofollow\" href=\"https:\/\/www.shodan.io\/\"><strong>Shodan<\/strong><\/a><\/noindex>, tad no 5,250,000 serveru datu b\u0101z\u0113:<\/p>\n<ul>\n<li>apm\u0113ram 3,500,000 izmanto Exim 4.92 (apm\u0113ram 1,380,000 ar SSL\/TLS);<\/li>\n<li>vair\u0101k nek\u0101 74,000 izmanto 4.92.1 (apm\u0113ram 25,000 ar SSL\/TLS).<\/li>\n<\/ul>\n<p>T\u0101d\u0113j\u0101di publiski zin\u0101mu un pieejamu Exim potenci\u0101li neaizsarg\u0101tu serveru skaits ir aptuveni <strong>1.5 miljons<\/strong>.<\/p>\n<p><img decoding=\"async\" alt=\"Izlabojiet Exim \u2014 izlabojiet v\u0113lreiz. Jauna Remote Command Execution ievainojam\u012bba Exim 4.92 vien\u0101 piepras\u012bjum\u0101.\" src=\"\/wp-content\/uploads\/2019\/09\/53dac3e4d5d4a127f522a17ae1633084.jpg\" style=\"display:block;margin: 0 auto;\"><\/p>\n<p><em>Exim serveru mekl\u0113\u0161ana Shodan<\/em><\/p>\n<h3 id=\"zaschita\">Aizsardz\u012bba<\/h3>\n<ul>\n<li>Visvienk\u0101r\u0161\u0101kais, bet neieteicamais variants \u2014 neizmantot TLS, kas noved\u012bs pie e-pasta zi\u0146ojumu p\u0101rs\u016bt\u012b\u0161anas atkl\u0101t\u0101 veid\u0101.<\/li>\n<li>V\u0113lams, lai izvair\u012btos no ievainojam\u012bbas izmanto\u0161anas, atjaunin\u0101t uz versiju <noindex><a rel=\"nofollow\" href=\"http:\/\/exim.org\/index.html\">Exim Internet Mailer 4.92.2<\/a><\/noindex>.<\/li>\n<li>Ja atjaunin\u0101\u0161ana vai labota versija nav iesp\u0113jama, kod\u0101 Exim varat iestat\u012bt ACL opcijai <strong>acl_smtp_mail<\/strong> ar \u0161\u0101diem noteikumiem:\n<pre><code class=\"plaintext\"># to be prepended to your mail acl (the ACL referenced\n# by the acl_smtp_mail main config option)\ndeny    condition = ${if eq{}{${substr{-1}{1}{$tls_in_sni}}}}\ndeny    condition = ${if eq{}{${substr{-1}{1}{$tls_in_peerdn}}}}<\/code><\/pre>\n<\/li>\n<\/ul>\n<p>Avots: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/jetinfosystems\/blog\/467089\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u0432\u0441\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e, \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043b\u0435\u0442\u0430, \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043f\u0440\u0438\u0437\u044b\u0432\u044b \u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e Exim \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.92 \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2019-10149 (\u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 exim \u0434\u043e 4.92 \u2014 \u0438\u0434\u0451\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \/ \u0425\u0430\u0431\u0440). \u0410 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441 Sustes \u0440\u0435\u0448\u0438\u043b \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u0422\u0435\u043f\u0435\u0440\u044c \u0432\u0441\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0432\u0448\u0438\u0435\u0441\u044f \u043c\u043e\u0433\u0443\u0442 \u043e\u043f\u044f\u0442\u044c \u00ab\u043f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u0442\u044c\u0441\u044f\u00bb: 21 \u0438\u044e\u043b\u044f 2019 \u0433. \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Zerons \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28554,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38040","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"lv_LV\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b Exim \u2014 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u044c \u0435\u0449\u0435 \u0440\u0430\u0437. \u0421\u0432\u0435\u0436\u0435\u0435 Remote Command Execution \u0432 Exim 4.92 \u0432 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:21:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-02-01T09:37:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izlabota Exim \u2014 labojiet v\u0113lreiz. Jauns att\u0101lin\u0101ts komandu izpildes tr\u016bkums Exim 4.92 vien\u0101 piepras\u012bjum\u0101 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b Exim \u2014 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u044c \u0435\u0449\u0435 \u0440\u0430\u0437. \u0421\u0432\u0435\u0436\u0435\u0435 Remote Command Execution \u0432 Exim 4.92 \u0432 \u043e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 | ProHoster","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/propatchil-exim-propatch-eshhe-raz-svezhee-remote-command-execution-v-exim-4-92-v-odin-zapros","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:21:20+00:00","article:modified_time":"2021-02-01T09:37:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38040","title":null,"description":"","keywords":"","keyphrases":null,"primary_term":null,"canonical_url":"","og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 20:14:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:16:23","updated":"2026-01-23 20:14:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/38040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=38040"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/38040\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/28554"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=38040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=38040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=38040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}