Atlassian cancelled their self hosted server version of confluence and jira forcing many to their cloud product so I seriously hope it's not also vulnerable. Atlassian products are quite bloated, kinda nail biting having so much corporate secret info in such a product.
We already got bit by this and they circulated a pretty thorough write up. It's only affecting certain versions of the self-hosted version. They listed safe upgrade paths and a a mitigation patch.
