Description
In the development mode Grails provides a database console (available at /dbconsole/). This database console should not be available in the production environment as it leaks sensitive information about the database structure and permits executing SQL queries.
Remediation
It's recommended to restrict access to the database console by running Grails in production mode.