[HIGH] Winter: ImportExportController AJAX handlers bypass granular import/export permission gate

PKSA-kk7w-bn2w-32z8 GHSA-fm29-4mq3-phg6

Affected package: winter/wn-backend-module

Affected version: <=1.2.13

Reported by:
GitHub