I believe the more recent vulnerability doesn't apply to the atlassian tools (I'd love to know if I was mislead). My understanding was the latest struts vuln requires you to be using a specific REST plugin.

It was my understanding Atlassian tools like Jira and Confluence do not use Struts. Is this correct?