Can CVE-2022-0540 be mitigated by enabling CAS SSO
It is very likely that it cannot.
If it could be, then the Atlassian guide would definitely mention it. Also, the Seraph component is there, even if you're using SSO, so I think the dangerous entry point exists.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.