{"id":120895,"date":"2024-12-08T21:46:03","date_gmt":"2024-12-08T19:46:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt"},"modified":"2024-12-08T21:46:03","modified_gmt":"2024-12-08T19:46:03","slug":"uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","title":{"rendered":"Zranite\u013enosti, umo\u017e\u0148uj\u00face zameni\u0165 obrazy a vykona\u0165 k\u00f3d na ASU serveroch projektu OpenWrt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Vo vyv\u00edjanom projekte OpenWrt sa v n\u00e1stroji ASU (Attended SysUpgrade) objavili kritick\u00e9 zranite\u013enosti (CVE-2024-54143), ktor\u00e9 umo\u017e\u0148uj\u00fa skompromitovanie zostavovac\u00edch artefaktov \u0161\u00edren\u00fdch cez slu\u017ebu sysupgrade.openwrt.org alebo extern\u00e9 ASU servery. \u00dato\u010dn\u00edci m\u00f4\u017eu dosiahnu\u0165 in\u0161tal\u00e1ciu modifikovan\u00fdch obrazov firmwaru na syst\u00e9my pou\u017e\u00edvate\u013eov, ktor\u00ed pou\u017e\u00edvaj\u00fa re\u017eim 'attended upgrade' na aktualiz\u00e1ciu firmwaru prostredn\u00edctvom webov\u00e9ho rozhrania selector.openwrt.org alebo n\u00e1stroja pr\u00edkazov\u00e9ho riadku attended.sysupgrade.     <\/p>\n<p>Na \u00faspe\u0161n\u00e9 vykonanie \u00fatoku sta\u010d\u00ed \u00fato\u010dn\u00edkovi posla\u0165 po\u017eiadavku na vytvorenie zostavy na server ASU (podobn\u00e9 po\u017eiadavky m\u00f4\u017ee posla\u0165 ka\u017ed\u00fd pou\u017e\u00edvate\u013e bez autentifik\u00e1cie). Manipul\u00e1ciou so \u0161peci\u00e1lne form\u00e1tovan\u00fdm zoznamom bal\u00edkov m\u00f4\u017ee \u00fato\u010dn\u00edk organizova\u0165 odosielanie predt\u00fdm vygenerovan\u00fdch \u0161kodliv\u00fdch obrazov ako odpove\u010f na legit\u00edmne zostavovacie po\u017eiadavky in\u00fdch pou\u017e\u00edvate\u013eov.        <\/p>\n<p>Slu\u017eba ASU sa pou\u017e\u00edva v OpenWrt na vytv\u00e1ranie a in\u0161tal\u00e1ciu aktualiz\u00e1ci\u00ed firmv\u00e9ru bez straty existuj\u00facich nastaven\u00ed a nain\u0161talovan\u00fdch bal\u00edkov pou\u017e\u00edvate\u013eom. Cez webov\u00e9 rozhranie alebo n\u00e1stroj pr\u00edkazov\u00e9ho riadku pou\u017e\u00edvate\u013e posiela po\u017eiadavku na vytvorenie aktualizovan\u00e9ho obrazu firmv\u00e9ru, pri\u010dom uv\u00e1dza bal\u00edky nain\u0161talovan\u00e9 v jeho syst\u00e9me. Po chv\u00edli server ASU vytvor\u00ed obraz, ktor\u00fd zodpoved\u00e1 po\u017eadovan\u00e9mu obsahu, po \u010dom si ho pou\u017e\u00edvate\u013e stiahne a nain\u0161taluje do svojho zariadenia. Okrem toho je k dispoz\u00edcii mo\u017enos\u0165, ktor\u00e1 umo\u017e\u0148uje zachova\u0165 existuj\u00face nastavenia v aktualizovanom firmv\u00e9ri.       <\/p>\n<p>Za spracovanie po\u017eiadaviek od pou\u017e\u00edvate\u013eov zodpoved\u00e1 server ASU, ktor\u00fd sp\u00fa\u0161\u0165a automatick\u00fa zostavu obrazov firmv\u00e9ru pomocou n\u00e1stroja ImageBuilder a tie\u017e podporuje cache z predt\u00fdm pripraven\u00fdch zost\u00e1v. V pr\u00edpade, \u017ee pou\u017e\u00edvate\u013e po\u017eaduje obraz, ktor\u00fd bol u\u017e predt\u00fdm zostaven\u00fd a zachov\u00e1va aktu\u00e1lnos\u0165, syst\u00e9m okam\u017eite poskytne existuj\u00faci obraz z cache bez spustenia zostavovacieho procesu. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-newyork\/\"   title=\"serveri\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"2797\">serveri<\/a> a zachov\u00e1va aktu\u00e1lnos\u0165, syst\u00e9m okam\u017eite poskytne existuj\u00faci obraz z cache bez spustenia zostavovacieho procesu.    <\/p>\n<p>Spr\u00e1vanie \u00fatoku sa stalo mo\u017en\u00fdm v\u010faka dvom zranite\u013enostiam:  <\/p>\n<ul>\n<li class=\"l\"> Zranite\u013enos\u0165 v spracovate\u013eovi po\u017eiadaviek build_reques.py z n\u00e1strojov\u00e9ho s\u00faboru Imagebuilder umo\u017e\u0148uje vlo\u017eenie vlastn\u00fdch pr\u00edkazov do procesu zostavovania prostredn\u00edctvom zadan\u00fdch \u0161peci\u00e1lne form\u00e1tovan\u00fdch n\u00e1zvov bal\u00edkov. Zranite\u013enos\u0165 je sp\u00f4soben\u00e1 nedostato\u010dnou kontrolou \u0161peci\u00e1lnych znakov v n\u00e1zvoch bal\u00edkov pred ich pou\u017eit\u00edm medzi argumentmi utility make. Vyu\u017eit\u00edm tejto zranite\u013enosti m\u00f4\u017ee \u00fato\u010dn\u00edk na serveri vytvori\u0165 \u0161kodliv\u00e9 obrazy firmv\u00e9ru, podp\u00edsan\u00e9 spr\u00e1vnym zostavovac\u00edm k\u013e\u00fa\u010dom.\n<li class=\"l\"> Zranite\u013enos\u0165 v kni\u017enici util.py sp\u00f4soben\u00e1 t\u00fdm, \u017ee hash SHA-256, pou\u017e\u00edvan\u00fd na kontrolu existencie u\u017e pripraven\u00fdch obrazov firmwaru v cache, bol skr\u00e1ten\u00fd na 12 znakov, \u010do v\u00fdrazne zni\u017eovalo \u00farove\u0148 entropie a umo\u017enilo generovanie \u0161kodliv\u00e9ho obrazu, ktor\u00e9ho hash sa zhoduje s legit\u00edmnym obrazom. V kombin\u00e1cii so zranite\u013enos\u0165ou v Imagebuilder mohla by\u0165 t\u00e1to probl\u00e9m s hashmi pou\u017eit\u00e1 \u00fato\u010dn\u00edkom na 'zne\u010distenie' cache ASU servera a umiestnenie \u0161kodliv\u00fdch obrazov, ktor\u00e9 s\u00fa poskytovan\u00e9 na po\u017eiadavky be\u017en\u00fdch pou\u017e\u00edvate\u013eov.    <\/ul>\n<p>Zmena, po ktorej sa objavila mo\u017enos\u0165 vykonania \u00fatoku, bola vykonan\u00e1 8. j\u00fala. Probl\u00e9m bol odstr\u00e1nen\u00fd 4. decembra. Na zabezpe\u010denie fungovania slu\u017eby ASU boli pou\u017eit\u00e9 samostatn\u00e9 <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/\"   title=\"servery\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1974\">servery<\/a>, ktor\u00e9 sa neprekryli s hlavn\u00fdmi zostavovac\u00edmi syst\u00e9mami projektu, oddelen\u00e9 od OpenWrt Buildbotu a nemali pr\u00edstup k tak\u00fdm d\u00f4vern\u00fdm zdrojom, ako s\u00fa SSH k\u013e\u00fa\u010de a certifik\u00e1ty na vytv\u00e1ranie digit\u00e1lnych podpisov.     <\/p>\n<p>Tvrd\u00ed sa, \u017ee v\u00fdvoj\u00e1ri OpenWrt nena\u0161li \u017eiadne stopy po kompromise infra\u0161trukt\u00fary projektu, ale pre bezpe\u010dnos\u0165 znova nain\u0161talovali syst\u00e9my, na ktor\u00fdch sa vykon\u00e1vali zranite\u013en\u00e9 komponenty. Probl\u00e9m sa nedotkol ofici\u00e1lnych obrazov distribuovan\u00fdch cez web downloads.openwrt.org, a pri anal\u00fdze zostavovac\u00edch protokolov neboli n\u00e1jden\u00e9 \u017eiadne stopy zaslania \u0161kodliv\u00fdch po\u017eiadaviek. Z\u00e1rove\u0148, ke\u010f\u017ee na serveroch ASU prebieha automatick\u00e9 \u010distenie zost\u00e1v star\u0161\u00edch ako 7 dn\u00ed, uskuto\u010dni\u0165 audit star\u00fdch zost\u00e1v sa uk\u00e1zalo ako nemo\u017en\u00e9.       <\/p>\n<p>Pravdepodobnos\u0165 vyu\u017eitia identifikovan\u00fdch zranite\u013enost\u00ed v praxi na \u0161\u00edrenie \u0161kodliv\u00fdch obrazov prostredn\u00edctvom infra\u0161trukt\u00fary OpenWrt je predstavite\u013emi OpenWrt hodnoten\u00e1 ako bl\u00edzka nule, av\u0161ak pou\u017e\u00edvate\u013eom ASU sa odpor\u00fa\u010da nahradi\u0165 firmv\u00e9r OpenWrt na svojich zariadeniach na t\u00fa ist\u00fa verziu.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=62371\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441 sysupgrade.openwrt.org \u0438\u043b\u0438 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0440\u0435\u0436\u0438\u043c &#171;attended upgrade&#187; \u0447\u0435\u0440\u0435\u0437 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 selector.openwrt.org \u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 attended.sysupgrade. \u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120895","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-12-08T19:46:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enosti umo\u017e\u0148uj\u00face nahradi\u0165 obrazy a vykona\u0165 k\u00f3d na ASU serveroch projektu OpenWrt | ProHoster","description":"V rozv\u00edjaj\u00facom sa projekte OpenWrt bol v n\u00e1stroji ASU (Attended SysUpgrade) identifikovan\u00fd kritick\u00fd zranite\u013enos\u0165 (CVE-2024-54143), ktor\u00e1 umo\u017e\u0148uje skompromitovanie zostaven\u00fdch artefaktov distribuovan\u00fdch prostredn\u00edctvom slu\u017eby.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u0440\u0430\u0437\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 ASU-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenWrt | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c OpenWrt \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ASU (Attended SysUpgrade) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2024-54143), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u044b\u0435 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u044b, \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimosti-pozvolyayushhie-podmenit-obrazy-i-vypolnit-kod-na-asu-serverah-proekta-openwrt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-08T19:46:03+00:00","article:modified_time":"2024-12-08T19:46:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120895","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:04:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:43:20","updated":"2026-02-09 22:04:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120895","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=120895"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120895\/revisions"}],"predecessor-version":[{"id":160077,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/120895\/revisions\/160077"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=120895"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=120895"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=120895"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}