com.alauda.jenkins.plugins:alauda-devops-pipeline vulnerabilities (Maven)

2 vulnerabilities.

• com.alauda.jenkins.plugins:alauda-devops-pipeline Maven Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins CVE-2019-16574 6.5 MediumDecember 17, 2019
• com.alauda.jenkins.plugins:alauda-devops-pipeline Maven Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery CVE-2019-16573 8.8 HighDecember 17, 2019