Is there any official security publication about connections from database?

I am looking for any official publication released by e.g. OWASP, NIST, etc. which defines that connection from the database to web service is not allowed, definitely not secure.

Do you know any?