Is Confluence vulnerable to the "Apache Commons Collections Java library insecurely deserializes data" issue?

[roman_baeriswyl]

This question is in reference to Atlassian Documentation: Confluence Security Overview and Advisories

There's a severe security issue in the ACC library. I wanted to ask if Confluence is also vulnerable to this issue and if so, if there will be a fix for this soon.

Thanks for your help

[roman_baeriswyl · Accepted solution]

To answer my own question: Yes it is, and the update to Confluence 5.9.3 updates the ACC library and therefore fixes this vulnerability.