$Grails database console

Description

In the development mode Grails provides a database console (available at /dbconsole/). This database console should not be available in the production environment as it leaks sensitive information about the database structure and permits executing SQL queries.

Remediation

It's recommended to restrict access to the database console by running Grails in production mode.

References
Severity
Classification
Tags
  • Configuration