Java : Unsafe database connection (getConnection)

The application connects to the database using getConnection with a parameter obtained from an untrusted source.

Unsafe database connection attacks (Security Misconfiguration) take the sixth place in the OWASP Top 10 2017 web application vulnerabilities ranking.

By sending specific arguments to the ConnectionType.getConnection function via XMLRPC an attacker can trigger a remote code execution condition. An attacker can leverage this vulnerability to execute code under the context of the current process.