All products

com.alauda.jenkins.plugins:alauda-devops-pipeline

Maven · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Jenkins Alauda DevOps Pipeline Plugin allows attackers with Overall/Read permission to capture credentials stored in JenkinsCVE-2019-16574 · GHSA-8RFC-V3VJ-J62W com.alauda.jenkins.plugins:alauda-devops-pipeline Maven Medium No fix reported
Jenkins Alauda DevOps Pipeline Plugin vulnerable to cross-site request forgeryCVE-2019-16573 · GHSA-PV4C-RJ4H-GR9M com.alauda.jenkins.plugins:alauda-devops-pipeline Maven High No fix reported