In JetBrains TeamCity prior to 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.