Atlassian orders customers to cut internet access to Confluence after critical bug discovered
A patch is not yet available, but there are mitigations that can be applied.
Data Center Confluence Server Restrict Confluence Server Web Application Firewall Jave Server Page China Chopper
Source: techradar.com