Jenkins Alauda Devops Pipeline vulnerabilities

• jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 more Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in Jenkins CVE-2019-16574 6.5 MediumDecember 17, 2019
• jenkins alauda devops pipeline, jenkins project alauda devops pipeline plugin +1 more Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgery CVE-2019-16573 8.8 HighDecember 17, 2019