Java : Unsafe database connection config (Play)

The application initiates a connection to the database using a parameter from an untrusted source. An attacker can change the connection settings.

Unsafe database connection attacks (Security Misconfiguration) take the sixth place in the OWASP Top 10 2017 web application vulnerabilities ranking.

Attacker accesses default accounts, unused pages, unpatched flaws, unprotected files and directories, etc. to gain unauthorized access to or knowledge of the system.