An incorrect authorization issue in the Webform Submission Export/Import submodule allows for Server Side Request Forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. The submodule fails to sufficiently validate access to its export and import functionality. Consequently, a user with permissions to edit webform submissions and access webform results can access the import interface, including the remote URL import path.