The attack needs no authentication — only one public project that can hold the .org payload.

So probably not vulnerable if no public projects exist - ie self hosted has an needs auth for everything mode.