Atlassian cancelled their self hosted server version of confluence and jira forcing many to their cloud product so I seriously hope it's not also vulnerable. Atlassian products are quite bloated, kinda nail biting having so much corporate secret info in such a product.