Insecure OAuth redirection at [admin.8x8.vc]

Summary

The meetings admin application performed an insufficient validation of the specified redirect location during OAuth negotiation.

There was an improper redirection in "admin.8x8.vc" oauth that lead to takeover the admin.8x8.vc SSO accounts , When trying to adding an admin account in admin.8x8.vc you'll get a redirection to make authentication with your gmail account, and this redirection was not validated ,which leak the code token to whatever domain,, hacker have the ability to use these codes to log into the victim's account

• Vulnerable parameter : successRedirectUrl >> was accepting any domain to send the oauth secret login codes