[Bug]: 密码明文传参安全漏洞

[ChenJincheng-Gencent]

Bug Description

漏洞目标地址：
https://himarket.xxx.com/api/v1/developers/login https://himarket-admin.xxx.com/api/v1/admins/login https://higress.xxx.com/session/login https://higress.xxx.com/user/changePassword

Steps to Reproduce

存在问题描述：
此类漏洞指未正确使用相关密码算法，导致的内容未正确加密、弱加密、明文存储敏感信息等问题。

Expected Behavior

整改意见：
重要数据应采用适当的加密机制：对称加密算法：SM4、AES256及以上；非对称加密算法：SM2、RSA2048及以上，哈希/摘要算法：MD5加盐、SHA256加盐、SM3。同时避免使用能够轻易绕过的弱口令作为密钥或盐值。

Actual Behavior

密码明文传参

Affected Component

Admin Console

Severity

Medium (Feature partially works)

Environment

吉利内部测试环境，基于himarket v0.5版本

Logs and Error Messages

Screenshots

No response

Additional Context

No response

Checklist

• I have searched existing issues to avoid duplicates
• I have included all necessary information above
• I am using the latest version of HiMarket
• I can reproduce this issue consistently