The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint