Are Confluence versions 2.8.x affected by recent CVE-2021-26084?

[Mably]

The question is in the title.

Thanks for your help.

[Charlie Misonne · Accepted solution]

According to the documentation it is not because the oldest version it mentions is 4.x.x

But 2.8.x probably contains a lot of other vulnerabilities after more than 13 years so I would strongly recommend to upgrade that instance.

[Kishan Sharma]

Hi @Mably Welcome to the community!

Wow, you are running on Confluence version 2.8.x ? that's way too old. As per the advisory, i can't see that version is affected by the vulnerability, the affected versions starts with version 4.x.x and onwards. But I will recommend raising a support ticket with Atlassian support for confirmation.