{"id":102446,"date":"2021-12-02T21:36:39","date_gmt":"2021-12-02T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov"},"modified":"2021-12-02T21:36:39","modified_gmt":"2021-12-02T19:36:39","slug":"uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","title":{"rendered":"Uma vulnerabilidade no Mozilla NSS que permite a execu\u00e7\u00e3o de c\u00f3digo ao processar certificados","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Foi identificada uma vulnerabilidade cr\u00edtica (CVE-2021-43527) no conjunto de bibliotecas criptogr\u00e1ficas NSS (Network Security Services), desenvolvidas pela Mozilla, que pode permitir a execu\u00e7\u00e3o de c\u00f3digo por um invasor ao processar assinaturas digitais DSA ou RSA-PSS codificadas usando o m\u00e9todo DER (Distinguished Encoding Rules). A quest\u00e3o, codinome BigSig, foi corrigida nas vers\u00f5es NSS 3.73 e NSS ESR 3.68.1. Atualiza\u00e7\u00f5es de pacotes est\u00e3o dispon\u00edveis para distribui\u00e7\u00f5es como Debian, RHEL, Ubuntu, SUSE, Arch Linux, Gentoo e FreeBSD. Atualiza\u00e7\u00f5es para Fedora ainda n\u00e3o est\u00e3o dispon\u00edveis.    <\/p>\n<p> O problema se manifesta em aplicativos que utilizam o NSS para processar assinaturas digitais CMS, S\/MIME, PKCS #7 e PKCS #12, ou ao verificar certificados em implementa\u00e7\u00f5es TLS, X.509, OCSP e CRL. A vulnerabilidade pode surgir em diversos aplicativos cliente e servidor que suportam TLS, DTLS e S\/MIME, bem como em clientes de e-mail e visualizadores de PDF que utilizam a chamada NSS CERT_VerifyCertificate() para verificar assinaturas digitais.     <\/p>\n<p>Como exemplo de aplicativos vulner\u00e1veis, citam-se LibreOffice, Evolution e Evince. Potencialmente, o problema tamb\u00e9m pode afetar projetos como Pidgin, Apache OpenOffice, Suricata, Curl, Chrony, Red Hat Directory Server, Red Hat Certificate System, mod_nss para o servidor http Apache, Oracle Communications Messaging Server e Oracle Directory Server Enterprise Edition. A vulnerabilidade, no entanto, n\u00e3o se manifesta em Firefox, Thunderbird e Tor Browser, que utilizam uma biblioteca separada, mozilla::pkix, para verifica\u00e7\u00e3o, tamb\u00e9m inclu\u00edda no NSS. Navegadores baseados em Chromium n\u00e3o est\u00e3o vulner\u00e1veis, a menos que tenham sido especificamente compilados com NSS; eles usaram NSS at\u00e9 2015, mas foram ent\u00e3o migrados para BoringSSL.    <\/p>\n<p>A vulnerabilidade \u00e9 causada por um erro no c\u00f3digo de verifica\u00e7\u00e3o de certificados na fun\u00e7\u00e3o vfy_CreateContext no arquivo secvfy.c. O erro se manifesta tanto ao ler o certificado do cliente do servidor quanto ao processar <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pt\/server\/dts-prohoster\/\"   title=\"servidor\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3028\">servidor<\/a> certificados de clientes. Durante a verifica\u00e7\u00e3o da assinatura digital, que \u00e9 codificada pelo m\u00e9todo DER, o NSS decode a assinatura em um buffer de tamanho fixo, e passa esse buffer para o m\u00f3dulo PKCS #11. Durante o processamento adicional, para assinaturas DSA e RSA-PSS, o tamanho n\u00e3o \u00e9 verificado corretamente, o que resulta em um estouro de buffer reservado para a estrutura VFYContextStr, se o tamanho da assinatura digital exceder 16384 bits (o buffer destina-se a 2048 bytes, mas n\u00e3o h\u00e1 verifica\u00e7\u00e3o de que a assinatura pode ser maior).    <\/p>\n<p>O c\u00f3digo contendo a vulnerabilidade \u00e9 rastreado desde 2003, mas n\u00e3o representava uma amea\u00e7a at\u00e9 a refatora\u00e7\u00e3o realizada em 2012. Em 2017, durante a implementa\u00e7\u00e3o do suporte a RSA-PSS, foi cometida a mesma falha. Para realizar o ataque, n\u00e3o \u00e9 necess\u00e1ria a gera\u00e7\u00e3o intensiva de certas chaves para obter os dados necess\u00e1rios, pois o estouro ocorre na fase anterior \u00e0 verifica\u00e7\u00e3o da validade da assinatura digital. A parte dos dados que ultrapassa os limites \u00e9 gravada em uma \u00e1rea de mem\u00f3ria que cont\u00e9m ponteiros para fun\u00e7\u00f5es, facilitando a cria\u00e7\u00e3o de exploits funcionais.    <\/p>\n<p>A vulnerabilidade foi descoberta por pesquisadores do Google Project Zero durante experimentos com novos m\u00e9todos de fuzzing e \u00e9 uma boa demonstra\u00e7\u00e3o de como vulnerabilidades triviais podem permanecer despercebidas por longos per\u00edodos em um projeto amplamente testado e conhecido:  <\/p>\n<ul>\n<li class=\"l\"> O c\u00f3digo NSS \u00e9 mantido por uma equipe experiente respons\u00e1vel pela seguran\u00e7a, que utiliza m\u00e9todos modernos de teste e an\u00e1lise de erros. Existem v\u00e1rios programas que oferecem recompensas substanciais por descobrir vulnerabilidades no NSS.\n<li class=\"l\">  O NSS foi um dos primeiros projetos a se unir \u00e0 iniciativa Google oss-fuzz e tamb\u00e9m foi testado no sistema de fuzzing da Mozilla, desenvolvido com base no libFuzzer.\n<li class=\"l\"> O c\u00f3digo da biblioteca foi verificado v\u00e1rias vezes em diferentes analisadores est\u00e1ticos, incluindo a partir de 2008, quando foi rastreado pelo servi\u00e7o Coverity.\n<li class=\"l\"> At\u00e9 2015, o NSS era usado no Google Chrome e, independentemente da Mozilla, era verificado pela equipe do Google (a partir de 2015, o Chrome mudou para BoringSSL, mas o suporte ao port baseado no NSS permanece).    <\/ul>\n<p>Os principais problemas que mantiveram a quest\u00e3o n\u00e3o detectada por tanto tempo foram:  <\/p>\n<ul>\n<li class=\"l\"> A biblioteca modular NSS e os testes de fuzzing foram realizados n\u00e3o de forma geral, mas no n\u00edvel de componentes individuais. Por exemplo, o c\u00f3digo de decodifica\u00e7\u00e3o DER e o processamento de certificados foram testados separadamente \u2014 durante o fuzzing, poderia ter sido obtido um certificado que provocasse a vulnerabilidade em quest\u00e3o, mas sua verifica\u00e7\u00e3o n\u00e3o chegava ao c\u00f3digo de verifica\u00e7\u00e3o e o problema n\u00e3o se manifestava.\n<li class=\"l\"> Nos testes de fuzzing, foram impostos restri\u00e7\u00f5es rigorosas ao tamanho da sa\u00edda (10000 bytes), enquanto n\u00e3o havia tais limita\u00e7\u00f5es no NSS (muitas estruturas normalmente podiam ter mais de 10000 bytes, portanto, era necess\u00e1rio um maior volume de dados de entrada para identificar problemas). Para uma verifica\u00e7\u00e3o completa, o limite deveria ser de 224-1 bytes (16 MB), correspondente ao tamanho m\u00e1ximo de um certificado permitido no TLS.\n<li class=\"l\"> Representa\u00e7\u00e3o incorreta da cobertura de c\u00f3digo pelos testes de fuzzing. O c\u00f3digo vulner\u00e1vel foi testado ativamente, mas utilizando fuzzer que n\u00e3o conseguiam gerar os dados de entrada necess\u00e1rios. Por exemplo, o fuzzer tls_server_target utilizou um conjunto predefinido de certificados prontos, limitando a verifica\u00e7\u00e3o do c\u00f3digo de verifica\u00e7\u00e3o do certificado apenas a mensagens TLS e mudan\u00e7as de estado do protocolo.    <\/ul>\n<p>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56268\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 DSA \u0438\u043b\u0438 RSA-PSS, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DER (Distinguished Encoding Rules). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f BigSig, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 NSS 3.73 \u0438 NSS ESR 3.68.1. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102446","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilidade no Mozilla NSS que permite a execu\u00e7\u00e3o de c\u00f3digo ao processar certificados | ProHoster","description":"Foi identificada uma vulnerabilidade cr\u00edtica no conjunto de bibliotecas criptogr\u00e1ficas NSS (Network Security Services), desenvolvidas pela Mozilla (CVE-2021-43527), que pode levar \u00e0 execu\u00e7\u00e3o de c\u00f3digo malicioso.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-02T19:36:39+00:00","article:modified_time":"2021-12-02T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-02 19:38:04","updated":"2026-02-09 21:46:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/102446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=102446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/102446\/revisions"}],"predecessor-version":[{"id":160309,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/102446\/revisions\/160309"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=102446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=102446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=102446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}