2

Message ID : <[email protected]> Sent Date : Wed, 26 Dec 2018 22:03:27 +0000 From : [email protected] Sender MailID : [email protected] Reply To : [email protected] To : [email protected] Subject : Critical vulnerability found in Magento, upgrade necessary

------------------------- Contents -------------------------

gohost.sk web1 Recently a vulnerability in Magento was discovered that allows attackers to gain unauthorized access to your webshop. This unfortunately also means attackers can thereby access all information in your webshop including your customer database and the backoffice.

List of vulnerable systems The vulnerability is found in all Magento versions. Both users of Magento Community and Magento Enterprise are urged to update their webshop as soon as possible.

How to install the update The vulnerability is resolved by applying patch SUPEE-5344. In order to activate the update you will have to install the patch and flush the cache.

Click the link bellow to update.

https://update.magento.center/admin/?e=ZXZlbnRzQHRoZWlldC5vcmc=

© 2018 Magento, Inc. All Rights Reserved.

1
  • Do you have the patch applied? Also, I wouldn't click any links form that email, made sure I had all the patches installed and ignored this email.
    – Greg
    Jan 2, 2019 at 11:36

1 Answer 1

3

This is spam/scam. Do not click the link and ignore the mail.

update.magento.center is not an official Magento domain, also SUPEE-5344 is about 3 years old.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.